Senior SAP GRC & Authorizations Consultant

rindus; España; Hybrid; EUR 90,000 - 130,000; Full time

Benefits offered by this job

Private health insurance from day 1

Language courses (English & German)

Dynamic multicultural team

Flexible working model (office, hybrid

Pizza events and team activities

Job summary

rindus, a People company, is seeking a senior SAP Authorization & Access Governance expert to join our distributed team. You will own end-to-end SAP authorization across S/4HANA Retail and related applications, advising programs and translating business and compliance needs into robust access controls.

Fluency in English is required; German is an advantage. You can work from Málaga or remotely within Europe, joining a multicultural crew and contributing to global transformations with go-live

Qualifications

• 7+ years hands-on SAP authorizations and access governance in large/global SAP landscapes.
• Deep knowledge of SAP GRC Access Control (ARA, ARM, BRM, EAM, SoD, user access reviews).
• Authorization design experience in SAP Retail and S/4HANA environments.
• Strong understanding of identity lifecycle management, SSO, LDAP/AD integration, privileged access.
• Experience with internal controls, audit evidence, data protection requirements, SOX environments.
• Proven track record in global SAP transformations, template governance, rollout delivery.
• Fluent English is required; German is an advantage.

Responsibilities

• Own end-to-end SAP authorization and access governance across S/4HANA Retail.
• Act as a senior advisor for SAP programs and translate business and compliance requirements into robust access solutions.
• Define and approve the global authorization concept, design standards, and least-privilege principles.
• Lead role design, remediation, transport, testing, deployment, and lifecycle management across the global template.
• Own SAP GRC Access Control processes, including Access Risk Analysis and user access reviews.
• Maintain the SoD ruleset, critical access catalog, and control ownership with Internal Controls and Internal Audit.
• Ensure emergency access assignments and usage logs are documented per policy.
• Nominate business role owners and approve global/local role builds.
• Maintain authorization design documentation, role catalogs, and logs in audit-ready state.
• Support security readiness and go-live sign-off, including mapping and cutover controls.
• Build C&A operational capability and knowledge transfer during the pilot.

Skills

SAP authorizations

Access governance

GRC Access Control

SoD reviews

Role design

Tools

SAP GRC Access Control

S/4HANA Retail

Job description

Get ready to set sails and navigate the rindus wave

We're rindus, a People company. We love IT professionals and our passion is to help and empower our crew to get the best out of themselves, unfold their full potential, and help them grow.

Because growth is in our mindset, we're doing it since 2017, closely with our German Partners, helping them shape their software development teams.

So far, we have 160+ crew members of 14 different nationalities sailing with us in the open seas. We ‘re expanding our team and looking for a new rinder to get on board. Are you the next to be reeled in?

About our partner

On behalf of our partner C&A, we are looking for the best talent to join rindus. C&A is a multinational retail clothing brand, with stores in all Europe. We are currently collaborating with their e-commerce division, with the headquarters in Düsseldorf (Germany), you will work in a distributed team from our office in Málaga (Spain) or from home.

What you'll be doing

• Own the end-to-end SAP authorization and access governance scope across S/4HANA Retail and related SAP applications.
• Act as a senior advisor for SAP programs and transformations, translating business and compliance requirements into robust authorization and access control solutions.
• Define and approve the global authorization concept, design standards, naming conventions, least-privilege principles, and the use of task, business, composite, and country-specific derived roles.
• Lead role design, build, remediation, transport, testing, deployment, and lifecycle management across the global template and rollout waves.
• Own SAP GRC Access Control processes, including Access Risk Analysis, Access Request Management, Business Role Management, Emergency Access Management, SoD reviews, and user access reviews.
• Maintain the SoD ruleset, critical access catalog, organizational rules, mitigating controls, and control ownership in collaboration with Internal Controls and Internal Audit.
• Ensure that emergency access assignments, usage logs, controller reviews, and periodic certifications are completed and documented in accordance with policy.
• Nominate and enable business role owners, approve global and local role builds, and challenge local requirements that deviate from the global template.
• Maintain authorization design documentation, role catalogs, decision logs, control evidence, and operating procedures in an audit-ready state.
• Support security readiness and go-live sign-off, including user-to-role mapping, open- risk acceptance, cutover access, and hypercare controls.
• Build C&A’s operational capability and manage knowledge transfer, operating model definition, and the handover of Security & GRC services during the pilot.

What you'll bring

• At least 7 years of hands-on experience in SAP authorizations and access governance within large, complex, or global SAP landscapes.
• Deep working knowledge of SAP GRC Access Control, particularly ARA, ARM, BRM, EAM, SoD, user access reviews, workflow configuration, and provisioning integration.
• Authorization design experience in SAP Retail, combined with solid experience in S/4HANA environments.
• Solid understanding of identity lifecycle management, SSO, LDAP or Active Directory integration, privileged access.
• Experience with internal controls, audit evidence, data protection requirements, control remediation, and regulated or SOX-relevant environments.
• Proven track record in global SAP transformations, template governance, rollout delivery, go-live readiness, hypercare, and transition to operations.
• Strong analytical, stakeholder management, and communication skills, with the confidence to make design decisions, challenge exceptions, and engage business owners, IT Security, auditors, and implementation partners.
• Ability to work independently and reliably with a consultative mindset, delivering high-quality results within an established team.
• Fluency in English is required; German is an advantage.

What we offer

• Being part of dynamic and highly motivated international multicultural team of skilled professionals.
• Flexible working model: You can choose the work model that fits your lifestyle (At office, hybrid or full remote)
• Private health insurance from day 1.
• English and German language classes.
• A young and ambitious team that knows when to work but also when to have fun (Pizza day, Summer event, Padel Tournaments, etc).