SAP Security Architect – RISE, IAM & Secure-by-Design

Otto Group one.O; Málaga; Híbrido; EUR 30.000 - 50.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Permanent contract

Hybrid work mode

Flexible working hours

Medical insurance

Training and Development

Descripción de la vacante

Otto Group one.O is seeking a seasoned SAP security specialist to build and govern security for a SAP RISE landscape. You will own the security architecture, implement IAM controls including MFA and SSO, and coordinate with SAP RISE for shared responsibility.

You will also define hardening baselines, manage vulnerability remediation, and integrate monitoring, SIEM, and audit logging, ensuring compliance with ISO 27001 and NIST2. Strong communication is essential.

Formación

• Deep SAP authorization and security expertise.
• Strong knowledge of SAP RISE security model.
• Experience with IAM, GRC, Cloud Identity Services.
• Familiarity with vulnerability management and SAP Security Notes.
• Understanding of compliance frameworks (ISO 27001, NIST2).
• Strong communication skills.

Responsabilidades

• Build SAP security from scratch for a new SAP RISE landscape.
• Define security governance, standards, and processes.
• Own SAP security architecture and secure-by-design principles.
• Implement IAM (roles, SoD, PAM/EAM, MFA, SSO).
• Manage vulnerability processes and remediation.
• Define hardening standards and baselines.
• Coordinate shared-responsibility security with SAP RISE.
• Integrate monitoring, SIEM, and audit logging.

Conocimientos

SAP security

SAP RISE security

IAM

GRC

Cloud Identity Services

Vulnerability management

ISO 27001

NIST2

Strong communication

Herramientas

QRadar

SIEM integration

Descripción del empleo

Otto Group one.O is seeking a seasoned SAP security specialist to build and govern security for a SAP RISE landscape. You will own the security architecture, implement IAM controls including MFA and SSO, and coordinate with SAP RISE for shared responsibility.

You will also define hardening baselines, manage vulnerability remediation, and integrate monitoring, SIEM, and audit logging, ensuring compliance with ISO 27001 and NIST2. Strong communication is essential.