Job Summary
We are looking for an experienced Senior SAP S/4HANA Security Engineer (Finance) to design, implement, and manage SAP security solutions across Finance systems. The ideal candidate will have strong expertise in SAP Security, particularly within Central Finance (CFIN) or Group Reporting, with hands-on experience in SAP S/4HANA security design, role management, and governance.
Key Responsibilities
- Design, configure, and implement SAP S/4HANA security roles, authorizations, and user profiles across various SAP environments.
- Define and implement secure role-based access controls (RBAC) and Segregation of Duties (SoD) in collaboration with business and process teams.
- Partner with business stakeholders and control teams to design appropriate security controls and authorization frameworks.
- Configure and maintain SAP security settings, user roles, and authorization objects.
- Support SAP Security implementations, enhancements, and system upgrades.
- Ensure compliance with audit, governance, and security policies.
- Manage and maintain role catalogues within Identity Governance & Administration (IGA) platforms.
- Provide security guidance for SAP Finance modules and ensure adherence to best practices.
Mandatory Requirements
- 6–10+ years of experience in SAP Security.
- Hands-on experience with SAP S/4HANA Security.
- Experience in Central Finance (CFIN) or Group Reporting security design.
- Participated in at least one full-cycle SAP Security implementation.
- Strong experience in SAP role design, authorizations, and profile management.
- Able to work independently with business users and control teams to define and implement security controls.
- Excellent communication and stakeholder management skills.
Preferred Skills
- Experience with SAP Fiori Security.
- Experience with SAP HANA Security.
- Experience with SAP Cloud Security.
- Strong knowledge of:
- Role-Based Access Control (RBAC)
- Segregation of Duties (SoD)
- Audit and Compliance Management
- Familiarity with Identity & Access Management (IAM) solutions and SAP integration.
- Experience managing Role Catalogues using one or more IGA platforms such as:
- Saviynt
- SAP IDM
- ForgeRock
Technical Skills
- SAP S/4HANA Security
- SAP Authorization Concepts
- SAP Role Administration
- SAP Fiori Security
- SAP HANA Security
- SAP Cloud Security
- RBAC
- SoD
- IAM / IGA
- Audit & Compliance
