SAP security specialist

IBM; Madrid; Presencial; EUR 70.000 - 110.000; Jornada completa

Descripción de la vacante

IBM Consulting is seeking a SAP Security Specialist to strengthen security across SAP ECC/S/4HANA landscapes, focusing on governance, access management, and secure development.

You will define baseline security, support audits, and collaborate with global teams to deliver compliant, resilient solutions.

Formación

• 8+ years SAP security across SAP ECC/S/4HANA environments.
• Experience conducting SoD analyses and remediation.
• Proficient with GRC Access Control and role lifecycle management.
• Strong IAM and access governance skills.

Responsabilidades

• Research security trends and define requirements for SAP security projects.
• Design and implement security controls across SAP landscapes.
• Lead access management, migration of roles, and SoD enforcement.
• Coordinate security procedures and audit evidence readiness.
• Collaborate with cross-functional teams to resolve security incidents.

Conocimientos

SAP Security

S/4HANA

GRC Access Control

SoD analysis

IAM

Security architecture

Cloud security

Data protection

Educación

Bachelor's Degree

Herramientas

SAP ECC

S/4HANA

SAP GRC Access Control

SAP Cloud IAG

SAP BTP

SAP NetWeaver

Descripción del empleo

Introduction A career in IBM Consulting is built on long-term client relationships and close collaboration worldwide. You’ll work with leading companies across industries, helping them shape their hybrid cloud and AI journeys. With support from our strategic partners, robust IBM technology, and Red Hat, you’ll have the tools to drive meaningful change and accelerate client impact. At IBM Consulting, curiosity fuels success. You’ll be encouraged to challenge the norm, explore new ideas, and create innovative solutions that deliver real results. Our culture of growth and empathy focuses on your long-term career development while valuing your unique skills and experiences.

Introduction A career in IBM Consulting is built on long-term client relationships and close collaboration worldwide. You’ll work with leading companies across industries, helping them shape their hybrid cloud and AI journeys. With support from our strategic partners, robust IBM technology, and Red Hat, you’ll have the tools to drive meaningful change and accelerate client impact. At IBM Consulting, curiosity fuels success. You’ll be encouraged to challenge the norm, explore new ideas, and create innovative solutions that deliver real results. Our culture of growth and empathy focuses on your long-term career development while valuing your unique skills and experiences.

Your Role And Responsibilities

As a SAP Security Specialist, you will play a crucial role in researching emerging security trends and technologies, identifying business and technical requirements, and supporting the deployment of global security solutions. You will leverage your technical expertise to drive agile execution and ensure the security of our systems, designing, implementing, and maintaining security configurations across a broad range of SAP solutions. Your primary responsibilities will include:

Security Governance

• SAP security and cybersecurity blueprint design with all necessary security controls
• Secure architecture design, including all necessary technical components: S/4HANA, SAP BTP, SAP Cloud Connector, SAP GRC Access Control / SAP Cloud IAG, interfaces, etc.
• Support in the preparation of security procedures: access management, developer control, third-party access, etc.
• Design of controls that make the system easily auditable both internally and externally (General IT Controls) and preparation of audit evidence.

Coordination of follow-up meetings and project risks.

Access Management

• Support in the process of migration and conversion/remediation of existing roles and profiles in SAP ECC to SAP S/4HANA.
• Support in the process of reviewing the segregation matrix and its implementation in SAP GRC Access Control and SAP Cloud IAG.
• Ensuring that new migrated/converted roles comply with segregation of duties.
• IAM (Identity and Access Management) architecture review: GRC AC / Cloud IAG / Cloud Identity Services, BTP, etc.

System Securing

• Definition of security baseline, including all relevant parameters at the level SAP HANA, SAP ABAP / NetWeaver, and SAP BTP.
• Advice on good hardening practices and safe configuration.
• Proposal for Activation of Logs in S/4HANA for integration with SAP ETD.
• Security design for interfaces through analysis of transferred information and best proposal for each typology based on SAP standards.
• Recommendations for data protection and encryption in transit and at rest.
• Risk assessment in integration with external systems, external technical interfaces, use of APIs, etc.

Secure Development and Privileged Access

• Definition of specific controls for technical profiles and developers:
  • Separation between development, testing and production.
  • Direct access restrictions to production environments.
• Monitoring of elevated permissions and privileged access during the project.
• Recommendations on the use of technical and emergency accounts.

Preferred Education

Bachelor's Degree

Required Technical And Professional Expertise

• Over 8 SAP Security experience years supporting and securing SAP landscapes across complex enterprise environments.
• Skilled in managing user administration, role design, and authorization concepts within SAP ECC, S/4HANA, and associated modules.
• Experience in conducting security audits, segregation-of-duties (SoD) analysis, and implementing remediation plans to ensure compliance with internal and regulatory standards.
• Proficient in GRC Access Control, including firefighting, access risk analysis, and role lifecycle management.
• Adept at collaborating with cross-functional teams to resolve security incidents and support project initiatives.
• Strong analytical skills, attention to detail, and a proactive approach to identifying vulnerabilities.

Preferred Technical And Professional Experience

• Familiarity with Cloud Security: Experience with cloud-based security solutions and technologies, including deployment and management of security controls in cloud environments.
• Knowledge of Compliance Frameworks: Understanding of industry-recognized compliance frameworks and regulations, such as HIPAA, PCI-DSS, and GDPR.
• Exposure to AI-Powered Security: Familiarity with AI-powered security tools and technologies, including machine learning-based threat detection and incident response systems.