SAP Security Lead

Infosys Limited; Sydney; Hybrid; AUD 151,000 - 171,000; Full time

Benefits offered by this job

Income Protection Insurance

Paid Parental and Volunteer leaves

Employee Assistance Program (EAP)

Flexible working arrangements

Job summary

Infosys Limited in Sydney, NSW, is seeking an experienced SAP Security Lead to drive end-to-end security design, governance, and access management across SAP landscapes. Location: Sydney, hybrid work model. Salary: AUD 150,742 – 171,215 Annual Gross. Flexible working arrangements (hybrid, case-by-case).

The role leads security activities across implementation, support, and transformation programs, ensuring robust role design, risk mitigation, and audit alignment for SAP environments.

Qualifications

• Extensive SAP security experience in large programs.
• Design, build and govern SAP roles, authorizations and profiles.
• Lead security governance, risk mitigation and audit alignment.

Responsibilities

• Lead SAP Security across S/4HANA implementations, upgrades and support.
• Define security architecture aligned with SAP best practices.
• Oversee SoD controls and user access provisioning across ECC, S/4HANA, Fiori, BW, BTP, GRC.
• Mentor team members and drive capability development in the security function.
• Ensure security documentation, governance standards and approval workflows are maintained.

Skills

SAP Security

Leadership

Governance & Compliance

Access Management

S/4HANA Security

Fiori Security

GRC Access Control

Education

IT degree or equivalent

Tools

SAP GRC Access Control

SAP BTP Security

SAP Basis

SAP Certifications

Job description

Infosys is a global leader in next-generation digital services and consulting. We enable clients in more than 56 countries to navigate their digital transformation. With over four decades of experience in managing the systems and workings of global enterprises, we expertly steer our clients through their digital journey. We do it by enabling the enterprise with an AI-powered core that helps prioritize the execution of change. We also empower the businesses with agile digital at scale to deliver unprecedented levels of performance and customer satisfaction. Our always-on learning agenda drives their continuous improvement through building and transferring digital skills, expertise, and ideas from our innovation ecosystem.

Visit www.infosys.com to see how Infosys (NYSE: INFY) can help your enterprise navigate your next.

Role Description:

We are seeking an experienced SAP Security Lead to drive end-to-end security design, governance, and access management across SAP landscapes. The role involves leading SAP security activities across implementation, support, and transformation programs, ensuring robust role design, compliance, risk mitigation, and alignment with business and audit requirements.

Location: Sydney, NSW

Salary: AUD 150,742 – 171,215 Annual Gross

Please Note: - The above salary range is only indicative and maybe subject to suitable enhancements, based on internal company processes

Flexible working arrangements (hybrid, reviewed case-by-case basis). Feel free to connect with your recruiter to learn more about how this works in practice.

Roles and Responsibilities:

• Lead and manage SAP Security activities across S/4HANA implementation, upgrade, and support programs
• Design, build, and maintain SAP roles, authorizations, and profiles across SAP systems
• Define and govern security architecture aligned with SAP best practices and compliance requirements
• Lead role redesign and remediation activities for S/4HANA transformations
• Manage user access provisioning, access reviews, and segregation of duties (SoD) controls
• Oversee security support for SAP landscapes including ECC, S/4HANA, Fiori, BW, BTP, GRC, and integrated systems
• Drive SAP Fiori security configuration including catalogs, groups/spaces, pages, and OData authorizations
• Collaborate with functional, Basis, audit, compliance, and business teams to address access requirements
• Support SAP GRC Access Control processes including ARA, ARM, BRM, and EAM, where applicable
• Lead security activities during system refreshes, migrations, upgrades, and cutover cycles
• Review and mitigate security risks, audit findings, and compliance gaps
• Ensure security documentation, role matrix, governance standards, and approval workflows are maintained
• Mentor team members and support capability development across the security function
• Manage escalations, provide resolution strategies, and ensure timely closure of critical access issues

About Us:

Infosys is a global leader in next-generation digital services and consulting. We enable clients in more than 56 countries to navigate their digital transformation. With over four decades of experience in managing the systems and workings of global enterprises, we expertly steer our clients through their digital journey. We do it by enabling the enterprise with an AI-powered core that helps prioritize the execution of change. We also empower the businesses with agile digital at scale to deliver unprecedented levels of performance and customer satisfaction. Our always-on learning agenda drives their continuous improvement through building and transferring digital skills, expertise, and ideas from our innovation ecosystem.

Visit www.infosys.com to see how Infosys (NYSE: INFY) can help your enterprise navigate your next.

Role Description:

We are seeking an experienced SAP Security Lead to drive end-to-end security design, governance, and access management across SAP landscapes. The role involves leading SAP security activities across implementation, support, and transformation programs, ensuring robust role design, compliance, risk mitigation, and alignment with business and audit requirements.

Location: Sydney, NSW

Salary: AUD 150,742 – 171,215 Annual Gross

Please Note: - The above salary range is only indicative and maybe subject to suitable enhancements, based on internal company processes

Flexible working arrangements (hybrid, reviewed case-by-case basis). Feel free to connect with your recruiter to learn more about how this works in practice.

Roles and Responsibilities:

• Lead and manage SAP Security activities across S/4HANA implementation, upgrade, and support programs
• Design, build, and maintain SAP roles, authorizations, and profiles across SAP systems
• Define and govern security architecture aligned with SAP best practices and compliance requirements
• Lead role redesign and remediation activities for S/4HANA transformations
• Manage user access provisioning, access reviews, and segregation of duties (SoD) controls
• Oversee security support for SAP landscapes including ECC, S/4HANA, Fiori, BW, BTP, GRC, and integrated systems
• Drive SAP Fiori security configuration including catalogs, groups/spaces, pages, and OData authorizations
• Collaborate with functional, Basis, audit, compliance, and business teams to address access requirements
• Support SAP GRC Access Control processes including ARA, ARM, BRM, and EAM, where applicable
• Lead security activities during system refreshes, migrations, upgrades, and cutover cycles
• Review and mitigate security risks, audit findings, and compliance gaps
• Ensure security documentation, role matrix, governance standards, and approval workflows are maintained
• Mentor team members and support capability development across the security function
• Manage escalations, provide resolution strategies, and ensure timely closure of critical access issues

Technical Expertise Requirements

• 10-12+ years of total IT experience
• 8-10+ years of strong SAP Security / Authorizations experience with leadership exposure
• 5+ years of experience in SAP S/4HANA programs
• Proven experience in leading SAP security workstreams in large-scale delivery programs
• Strong expertise in SAP Roles and Authorizations and User and access administration
• Segregation of Duties (SoD) and compliance controls
• Fiori security and OData authorization concepts
• Experience in S/4HANA role redesign / remediation
• Strong understanding of SAP security across modules such as FI, MM, SD, HCM, BW
• Experience in handling audit, compliance, and risk remediation requirements
• Excellent stakeholder management, communication, and leadership skills

Essential:

• Hands-on experience with SAP GRC Access Control
• Exposure to SAP BTP security and cloud identity concepts
• Understanding of Basis, transport management, and integration security concepts
• Familiarity with SAP security for CPI / PI/PO / SuccessFactors / Ariba / Concur environments
• Relevant SAP certifications in Security / GRC / S/4HANA

ADDITIONAL

• Excellent customer-facing skills
• Excellent written and verbal communication skills
• Strong attention to detail and outstanding analytical and problem-solving skills.

In addition to compensation aligned with your role, you’ll have access to a wide range of benefits that support your health, career growth, and overall well-being (AU)

• Income Protection Insurance
• Paid Parental and Volunteer leaves
• Employee Assistance Program (EAP)
• Flexible working arrangements (hybrid, reviewed case-by-case basis)
• Health Insurance Discount and Well-being Program
• Access to Fitness and Gym Memberships
• Salary packaging and novated leasing

Our recruitment and selection process is designed to create the best match for both you and Infosys. Depending on the role, it may include an initial screening, technical or functional interviews, and conversations focused on cultural alignment and shared values. We are committed to making the experience transparent, respectful, and engaging at every step.
Hear from our recruiter on their experience working with Infosys as an Employer
At Infosys, we recognize that everyone has individual requirements. If you are a person with disability, illness, or injury and require adjustments to the recruitment and selection process, please contact our Recruitment team for adjustment either via the following email [e-mail] or call 1-866-472-0935. Alternatively, you can include your preferred method of communication in email, and someone will be in touch.
Please note in order to protect the interest of all parties involved in the recruitment process, Infosys does not accept any unsolicited resumes from third-party vendors. In the absence of a signed agreement, any submission will be deemed as non-binding and Infosys explicitly reserves the right to pursue and hire the submitted profile. All recruitment activity must be coordinated through the Talent Acquisition department.
All aspects of employment at Infosys are based on merit, competence and performance. We are committed to embracing diversity and creating an inclusive environment for all employees. Infosys is proud to be an equal opportunity employer.