SAP Security Senior Consultant TechOps (Application Management)
As an SAP Security Senior Consultant, you will play a pivotal role in safeguarding enterprise SAP landscapes through the design, implementation, and support of SAP Security and Authorization solutions. Your primary responsibilities will include managing user access, role-based security, Segregation of Duties (SoD) compliance, identity governance, and ensuring adherence to corporate and regulatory security standards. You will collaborate with cross-functional teams to analyze business requirements and deliver secure, compliant, and scalable access management solutions across SAP environments. To succeed in this role, you should possess a strong understanding of SAP Security concepts across ECC, S/4HANA, SAP Fiori, SAP GRC, and cloud-based SAP applications. A minimum of a bachelor's degree in information technology, computer science, engineering, cybersecurity, or a related field is required. Your analytical skills, attention to detail, and ability to communicate complex security concepts clearly will be essential in driving successful project outcomes. This is a fantastic opportunity to be part of a leading firm whilst being instrumental in its growth as you get to work with a high-quality team supporting clients and ensuring the security, stability, and compliance of Global 500 companies through best-in-class solutions, automation, and innovation.
To qualify for the role, you must have:
- Bachelor's degree in a related technology field (Computer Science, Engineering, Information Systems, Cybersecurity, etc.) or comparable job experience.
- 7+ years of experience in SAP Security and Authorizations, preferably supporting global clients.
- Extensive experience with SAP Security in ECC, S/4HANA, SAP BW, SAP CRM, SAP Portal, and SAP Fiori environments.
- Strong expertise in role design, authorization concepts, user provisioning, access management, and security governance.
- Experience implementing and supporting Segregation of Duties (SoD) frameworks and compliance controls.
- Hands-on experience with SAP GRC Access Control, including Access Risk Analysis (ARA), Access Request Management (ARM), Business Role Management (BRM), and Emergency Access Management (EAM).
- Experience in user administration, role maintenance, security troubleshooting, authorization design, and audit support.
- Knowledge of SAP Identity Authentication Services (IAS), Identity Provisioning Services (IPS), Single Sign-On (SSO), and Identity Management solutions.
- Strong understanding of SAP security architecture and integration with SAP and non-SAP systems.
- Deep understanding of ITIL and ITSM processes and methodologies and how they interact with application lifecycle management principles.
- Proven track record of successfully delivering solutions in a complex, multi-platform environment.
- Extensive client management experience working with various regions in a global setting.
- Experience setting up, growing, transforming, and delivering application management services.
- Strong leadership and team-building skills with the ability to inspire and motivate teams to achieve excellence.
- Excellent communication and interpersonal skills with the ability to effectively engage and influence stakeholders at all levels of the organization.
- Strong analytical and problem-solving skills with the ability to think strategically and make data-driven decisions.
- Responsible for providing support for SAP Security incidents, ensuring minimal disruption to business operations.
- Support incident resolution by analyzing authorization issues, user access concerns, and security vulnerabilities raised by users and stakeholders.
- Work closely with customers and support teams to ensure security-related issues and requests are followed up and addressed in a timely manner.
- Handle change requests with a clear understanding of security, compliance, and business requirements.
- Understand business needs and deliver secure solutions that improve operational efficiency while maintaining strong internal controls.
- Cross-functional communication skills with experience working in offshore/onshore delivery models.
- Experience in security defect analysis, authorization remediation, and audit finding resolution.
- Ability to work with minimal guidance or supervision in a time-critical environment.
- Strong communication, collaboration, and leadership skills with the ability to work effectively in a global, cross-functional team environment.
- Flexibility in managing work hours due to the dynamic nature of Application Management work, including shift work and on-call support for critical business requirements.
Ideally, you’ll also have:
- Experience implementing and supporting SAP GRC Access Control and SAP Identity Access Governance (IAG).
- Knowledge of SAP Fiori Security, SAP Gateway Security, SAP BTP Security, and cloud identity services.
- Experience securing SAP cloud solutions including SAP SuccessFactors, SAP Ariba, SAP Concur, SAP IBP, and SAP Analytics Cloud.
- Expertise in security reporting, audit preparation, compliance documentation, and controls testing.
- Experience supporting SOX, GDPR, ISO 27001, and other regulatory compliance initiatives.
- Strong knowledge of SAP authorization concepts and integration points across FI, CO, MM, SD, PP, PM, HCM, BW, and other SAP applications.
- Experience designing and maintaining composite roles, derived roles, and authorization strategies in large enterprise environments.
- Knowledge of Cybersecurity frameworks and Identity and Access Management (IAM) best practices.
- SAP Security Certification, SAP GRC Certification, or relevant cybersecurity certifications.
What you will do:
- Provide day-to-day Application Management support for SAP Security services across IT Service Management, including service requests, incident management, enhancement requests, change management, and problem management as a Level 2 or Level 3 Application Management Specialist.
- Lead and mentor the SAP Security team, fostering a culture of collaboration, innovation, and continuous improvement.
- Lead and coordinate the resolution of complex security incidents, authorization issues, compliance risks, and access-related outages, including root cause analysis and corrective actions.
- Collaborate with internal and external stakeholders to gather requirements, assess business needs, and provide guidance on SAP Security architecture and access management solutions.
- Design, maintain, and optimize SAP roles, profiles, authorization objects, and user access controls across SAP systems.
- Develop and maintain security documentation, including role design documents, authorization matrices, security procedures, user guides, compliance artifacts, and testing documentation.
- Support audit activities, compliance reviews, segregation of duties assessments, and remediation initiatives.
- Mentor and train junior SAP Security team members, sharing best practices and providing guidance on troubleshooting, compliance, and security governance.
- Stay current with industry trends, cybersecurity practices, SAP security innovations, and emerging technologies to improve operational efficiency through automation and innovation.
- Participate in on-call rotations and provide after-hours support as required to ensure the availability, security, and reliability of critical SAP systems.
- Support implementation, upgrade, migration, and transformation projects involving SAP Security and GRC solutions.
- Be available to work shift hours depending on client requirements across Australia, Asia, Europe, and the Americas.
What We Look For
- A team of professionals with commercial acumen, relevant experience, and enthusiasm to learn new things in a fast-moving environment.
- An opportunity to be part of a market-leading, multidisciplinary team of 250+ professionals within the only integrated global transaction business worldwide.
- Opportunities to work with EY Technology, Cybersecurity, and SAP practices globally with leading businesses across a wide range of industries.
What working at EY offers:
- Support, coaching and feedback from some of the most engaging colleagues around
- Opportunities to develop new skills and progress your career
- The freedom and flexibility to handle your role in a way that's right for you
About EY
As a global leader in assurance, tax, transaction and advisory services, we’re using the finance products, expertise and systems we’ve developed to build a better working world. That starts with a culture that believes in giving you the training, opportunities and creative freedom to make things better. Whenever you join, however long you stay, the exceptional EY experience lasts a lifetime. And with a commitment to hiring and developing the most passionate people, we’ll make our ambition to be the best employer by 2020 a reality.
Join us in building a better working world.