SAP IAM - 6 Months Contractor

Chalhoub Group; Dubai; On-site; AED 220,000 - 320,000; Full time

Job summary

Chalhoub Group in Dubai is seeking a SAP Security SME currently based in Dubai for a six-month contract as part of our ERP Transform division.

You will design and govern SAP IAM, manage SoD risk, and partner with business and IT teams to deliver secure, scalable access governance across SAP ecosystems.

Qualifications

• Strong expertise in SAP Identity and Access Management (IAM) components.
• Experience with SAP S/4HANA, SAP BW/4HANA, SAC, and SAP Datasphere is preferred.
• Deep knowledge of SoD concepts, access analysis, and risk management.

Responsibilities

• Design and maintain SAP IAM architecture including role governance, remediation, and lifecycle management.
• Analyze SoD violations and implement practical risk mitigations.
• Support go-live, hypercare, and production stabilization for SAP transformations.
• Coordinate with business and IT teams to ensure secure, compliant access across SAP and non-SAP systems.

Tools

SAP S/4HANA

SAP SuccessFactors

SAP BW/4HANA

SAP Analytics Cloud

SAP Datasphere

SAP Ariba

SAP CAR

SAP BTP

SAP IAG

SAP IAS

SAP IPS

Job description

INSPIRE | EXHILARATE | DELIGHT

For over seven decades, Chalhoub Group has been a partner and creator of luxury experiences in the Middle East. In its pursuit to excel as a hybrid luxury retailer, the Group has curated a portfolio of over 10 owned brands and strengthened its distribution and marketing expertise for over 400 international names across luxury fashion, beauty, jewellery, watches, eyewear, and art de vivre categories.

INSPIRE | EXHILARATE | DELIGHT

For over seven decades, Chalhoub Group has been a partner and creator of luxury experiences in the Middle East. In its pursuit to excel as a hybrid luxury retailer, the Group has curated a portfolio of over 10 owned brands and strengthened its distribution and marketing expertise for over 400 international names across luxury fashion, beauty, jewellery, watches, eyewear, and art de vivre categories. Every step at Chalhoub Group is taken to build a future where luxury dreams become reality — bridging cultures and crafting memorable experiences for our consumers. Be it by constantly reinventing itself, committing to innovation, or embracing new technologies, the Group is shaping the future of luxury retail. It delivers seamless omnichannel experiences across more than 950 stores, online platforms, and mobile apps. Driving this innovation journey is The Greenhouse — the Group’s innovation hub, incubator, and accelerator for startups and emerging businesses, regionally and globally. Chalhoub Group fosters a people-at-heart culture rooted in diversity, equity, and inclusion, and a workplace catalysed by forward thinking and future-proofing. Today, it brings together over 16,000 talented professionals across eight countries in the Middle East, with a presence in LATAM. Sustainability is at the core of the Group’s strategy, guided by a clear commitment to people, partners, and the planet. Chalhoub Group is proud to be a member of the United Nations Global Compact, a signatory of the Women’s Empowerment Principles, and to have pledged to reach Net Zero by 2040.

Summary

We are in the lookout for a SAP Security SME who is currently based in Dubai and is available to join us immediately for a 6 months contract as a SAP IAM Contractor within our ERP Transform division.

Technical Expertise

Strong Expertise In SAP Role And Authorization Design Across

• SAP S/4HANA
• SAP SuccessFactors
• SAP BW/4HANA
• SAP Analytics Cloud (SAC)
• SAP Datasphere
• SAP Ariba
• SAP CAR
• SAP BTP

Broader security knowledge in above systems are good to have.

• Strong hands-on experience with:
• SAP IAG (Identity Access Governance)
• SAP IAS (Identity Authentication Service)
• SAP IPS (Identity Provisioning Service)
• Integration of SAP IAM components with SAP and non-SAP systems
• HR-driven Joiner, Mover, Leaver processes and identity lifecycle automation
• Joule for IAG
• Experience in enterprise-scale role design, role remediation, role rationalization, and role governance programs.
• Retail industry work experience is good to have

Governance, Risk & Compliance

• Strong knowledge of SoD concepts, SAP IAG Access Analysis, and SoD risk management.
• Experience in technical design and maintenance of SoD rulesets.
• Ability to analyse SoD violations and propose practical risk remediation and mitigation control designs.
• Experience supporting access governance, firefighter/PAM processes, access certification, and audit requirements.

Delivery & Data Quality

• Advanced Excel and data analysis skills.
• Strong attention to detail with ability to identify inconsistencies, errors, duplicates, and data quality issues in large role and user datasets.
• Ability to independently validate inputs, challenge assumptions, and ensure integrity of role design and access governance deliverables.
• Capable of driving activities with limited supervision and working across multiple parallel workstreams.
• Ability to plan and define action items based on objectives to be achieve
• Ability to work independetly and proactively

Stakeholder Management

• Ability to explain complex IAM and security concepts in business-friendly language
• Ability to work effectively with business and IT teams(internal and external)
• Strong documentation skills

Preferred Experience

• Experience with SAP RISE environments.
• Implementation experience with SAP IAG and hybrid landsacpe
• Experience supporting large-scale SAP transformation programs.
• Experience operating in regulated or audit-driven environments.
• Experience supporting go-live, hypercare, and production stabilization activities.