Senior SAP GRC & Authorizations Consultant

rindus Technology S.L; Málaga; Hybrid; EUR 70,000 - 110,000; Full time

Benefits offered by this job

23 holiday days

Private health insurance

Gym sponsorship

English and German language classes

Team events

Job summary

rindus is seeking a Senior SAP GRC & Authorizations Consultant to join a global team in Málaga or remote. You will own end-to-end SAP authorization and Access Governance across SAP applications, shaping design standards, SoD reviews, and deployment in the global template.

You bring 7+ years in SAP authorizations, deep GRC Access Control expertise (ARA/ARM/BRM/SoD), identity lifecycle and AD/LDAP integration, and strong stakeholder management. English fluency is required; German is advantageous.

Qualifications

• 7+ years of hands-on SAP authorizations experience
• Deep knowledge of SAP GRC Access Control (ARA/ARM/BRM/SoD) and related tooling
• Experience with identity lifecycle management and AD/LDAP integration
• Experience in global SAP transformations and governance processes
• Fluency in English; German is a plus

Responsibilities

• Own end-to-end SAP authorization and access governance across S/4HANA Retail and related SAP applications.
• Act as senior advisor for SAP programs, translating requirements into robust authorization solutions.
• Define and approve global authorization concepts, standards, and role architectures.
• Lead design, build, remediation, transport, testing, deployment and lifecycle management across templates and rollout waves.
• Maintain SAP GRC processes and control evidence; ensure audit readiness.

Skills

SAP authorizations

GRC Access Control

SoD reviews

Stakeholder management

English fluency

Tools

SAP GRC Access Control

Active Directory

LDAP

Job description

Senior SAP GRC & Authorizations Consultant

Full-time

About us

Hey!

Get ready to set sails and navigate therindus wave

We're rindus, a People company. We love IT professionals and ourpassion is to help and empower our crew to get the best out of themselves, unfold their full potential, and help them grow.

Becausegrowth is in our mindset, We're doing it since 2017, closely with our German Partners, helping them shape their software development teams.

So far, we have 160+ crew members of 14 different nationalities sailing with us in the open seas. We're expanding our team and looking for a new rinder to get on board. Are you the next to be reeled in?

About our partner

On behalf of our partner C&A, we are looking for the best talent to join rindus. C&A is a multinational retail clothing brand, with stores in all Europe. We are currently collaborating with their e-commerce division, with the headquarters in Düsseldorf (Germany), you will work in a distributed team from our office in Málaga (Spain) or from home.

What you'll be doing

• Own the end-to-end SAP authorization and access governance scope across S/4HANA Retail and related SAP applications.
• Act as a senior advisor for SAP programs and transformations, translating business and compliance requirements into robust authorization and access control solutions.
• Define and approve the global authorization concept, design standards, naming conventions, least-privilege principles, and the use of task, business, composite, and country-specific derived roles.
• Lead role design, build, remediation, transport, testing, deployment, and lifecycle management across the global template and rollout waves.
• Own SAP GRC Access Control processes, including Access Risk Analysis, Access Request Management, Business Role Management, Emergency Access Management, SoD reviews, and user access reviews.
• Maintain the SoD ruleset, critical access catalog, organizational rules, mitigating controls, and control ownership in collaboration with Internal Controls and Internal Audit.
• Ensure that emergency access assignments, usage logs, controller reviews, and periodic certifications are completed and documented in accordance with policy.
• Nominate and enable business role owners, approve global and local role builds, and challenge local requirements that deviate from the global template.
• Maintain authorization design documentation, role catalogs, decision logs, control evidence, and operating procedures in an audit-ready state.
• Support security readiness and go-live sign-off, including user-to-role mapping, open- risk acceptance, cutover access, and hypercare controls.
• Build C&A’s operational capability and manage knowledge transfer, operating model definition, and the handover of Security & GRC services during the pilot.

What you'll bring

• At least 7 years of hands-on experience in SAP authorizations and access governance within large, complex, or global SAP landscapes.
• Deep working knowledge of SAP GRC Access Control, particularly ARA, ARM, BRM, EAM, SoD, user access reviews, workflow configuration, and provisioning integration.
• Authorization design experience in SAP Retail, combined with solid experience in S/4HANA environments.
• Solid understanding of identity lifecycle management, SSO, LDAP or Active Directory integration, privileged access.
• Experience with internal controls, audit evidence, data protection requirements, control remediation, and regulated or SOX-relevant environments.
• Proven track record in global SAP transformations, template governance, rollout delivery, go-live readiness, hypercare, and transition to operations.
• Strong analytical, stakeholder management, and communication skills, with the confidence to make design decisions, challenge exceptions, and engage business owners, IT Security, auditors, and implementation partners.
• Ability to work independently and reliably with a consultative mindset, delivering high-quality results within an established team.
• Fluency in English is required; German is an advantage.

What we offer

• Being part of dynamic and highly motivated international multicultural team of skilled professionals.
• Flexible working model: You can choose the work model that fits your lifestyle (At office,hybrid or full remote)
• 23 holiday days.
• Private health insurance from day 1.
• Gym Sponsorship.
• English and German language classes.
• A young and ambitious team that knows when to work but also when to have fun (Pizza day, Summer event, Padel Tournaments, etc).