Lead Security Architect – SAP ERP Transformation

Yallo Group; Dubai; On-site; AED 350,000 - 550,000; Full time

Job summary

YALLO Group in Dubai is seeking a Lead Security Architect to govern the SAP S/4HANA transformation. You will be the security authority for the ERP programme and ensure the landscape is secure by design and monitored by the group’s Security Operations Centre.

This role spans the entire SAP environment—application, database, network, integrations, logging and detection. You will define security architecture and controls for SAP S/4HANA, BTP and Ariba, run threat modelling and risk assessments, and

Qualifications

• 10+ years in information security, including 5+ years in security architecture
• Hands-on experience securing SAP S/4HANA end to end, not only roles and access
• Experience integrating SAP logging and monitoring with a SIEM/SOC
• Knowledge of SAP BTP and cloud security (Azure, AWS or GCP)
• Understanding of SSO, SAML, OAuth2 and RBAC in an SAP context
• Experience on at least one large ERP transformation programme
• Certifications such as CISSP, SABSA, TOGAF or SAP System Security Architect are a strong plus

Responsibilities

• Define the security architecture, standards and controls for SAP S/4HANA, BTP, SuccessFactors and Ariba
• Run threat modelling, security impact assessments and risk assessments across the SAP landscape
• Design how SAP security logs and events feed into the SIEM/SOC for threat detection and incident response
• Review and approve the security of integrations, third-party add-ons and cloud deployments
• Sit on design review boards and turn compliance needs (ISO 27001, SOX, GDPR) into technical controls
• Set IAM and segregation-of-duties standards, working with the SAP GRC/IAG team
• Support internal and external audits of the ERP environment

Skills

Security architecture

SAP S/4HANA security

SIEM/SOC integration

Cloud security (SAP BTP/Azure/AWS/GCP)

IAM & RBAC in SAP

Threat modelling

GRC/ISO27001/SOX/GDPR

Education

CISSP

SABSA

TOGAF

SAP System Security Architect

Tools

SAP BTP

Azure

AWS

GCP

SIEM tooling

Job description

Job Title:Lead Security Architect – SAP ERP Transformation

Job Location: Dubai (on-site)

Job Type: Contract (1 year +)

Start Date: ASAP

Job Description:-

Role summary

We're hiring a Lead Security Architect for a leading Dubai-based retail group client. The group is running a major SAP S/4HANA transformation. You will be the security authority for the programme and will make sure the new ERP landscape is secure by design and monitored by the group's Security Operations Centre.

This is not an identity-and-access-only role. We need someone who can secure the whole SAP environment: application, database, network, integrations, logging and detection.

What you'll do

• Define the security architecture, standards and controls for SAP S/4HANA, BTP, SuccessFactors and Ariba
• Run threat modelling, security impact assessments and risk assessments across the SAP landscape
• Design how SAP security logs and events feed into the SIEM/SOC for threat detection and incident response
• Review and approve the security of integrations, third-party add-ons and cloud deployments
• Sit on design review boards and turn compliance needs (ISO 27001, SOX, GDPR) into technical controls
• Set IAM and segregation-of-duties standards, working with the SAP GRC/IAG team
• Support internal and external audits of the ERP environment

What you'll bring

• 10+ years in information security, including 5+ years in security architecture
• Hands-on experience securing SAP S/4HANA end to end, not only roles and access
• Experience integrating SAP logging and monitoring with a SIEM/SOC
• Knowledge of SAP BTP and cloud security (Azure, AWS or GCP)
• Understanding of SSO, SAML, OAuth2 and RBAC in an SAP context
• Experience on at least one large ERP transformation programme
• Certifications such as CISSP, SABSA, TOGAF or SAP System Security Architect are a strong plus