Senior SAP Security Consultant

Shakers; España; Remote; EUR 70,000 - 110,000; Full time

Job summary

Shakers is seeking an SAP Security Consultant to shape the S/4HANA security model and governance. This is a fully remote, long-term engagement with real ownership over access and authorizations design and governance.

You will work cross-functionally with functional and technical teams to ensure design translates into implementation, contribute to the SOC build-up, and maintain security controls across the SAP landscape.

Qualifications

• Hands-on track record in SAP S/4HANA Security.
• Strong command of the SAP authorization stack: PFCG, SU24, SUIM and Fiori authorizations.
• Practical experience with GRC Access Control across ARM, ARA, BRM and EAM.
• Working knowledge of Identity and Access Management.
• Exposure to cloud security in Azure, AWS or GCP.
• Familiarity with ISO 27001 and NIST reference frameworks.

Responsibilities

• Cover the security workstream in S/4HANA migrations, upgrades and greenfield implementations.
• Build and maintain the role and authorization model, segregation of duties included.
• Deploy security controls across S/4HANA and connected systems.
• Set the corporate SAP security standard and govern it over time.
• Partner with functional and technical squads to ensure proper implementation of controls.
• Run internal and external audit cycles, remediation activities.
• Roll out digital identity, access management and data protection capabilities.
• Contribute to SOC build-up for threat detection and response.

Skills

SAP S/4HANA Security

PFCG/SU24/SUIM

GRC Access Control

Identity and Access Management

Cloud security (Azure/AWS/GCP)

ISO 27001 / NIST

Tools

SAP BTP Security

SAP Cloud Identity Services

Job description

SAP Security Consultant - S/4HANA & GRC Access Control

At Shakers we are working with a global technology firm to bring in an SAP Security Consultant for its S/4HANA security model. Fully remote, long-term, and with real ownership over how access and authorizations are designed and governed.

The challenge

The SAP core keeps moving: migrations, upgrades and new implementations, and each of them needs the security layer resolved from day one rather than patched at the end. You take the authorization model, segregation of duties, GRC Access Control and the controls that keep audits clean. The work is cross-functional by nature, working side by side with functional and technical teams, so a key part of the role is ensuring the design survives contact with the actual implementation. There is also a build component beyond business as usual: contributing to the Security Operations Center so threats get detected and answered, not just logged.

Responsibilities

• Cover the security workstream in S/4HANA migrations, upgrades and greenfield implementations.
• Build and maintain the role and authorization model, segregation of duties included.
• Deploy security controls across S/4HANA and the systems connected to it.
• Set the corporate SAP security standard and keep it governed over time.
• Partner with functional and technical squads so controls are implemented as designed.
• Run internal and external audit cycles, remediation activities included.
• Roll out digital identity, access management and data protection capabilities.
• Contribute to building up the SOC for threat detection and response.

Requirements

• Hands-on track record in SAP S/4HANA Security.
• Strong command of the SAP authorization stack: PFCG, SU24, SUIM and Fiori authorizations.
• Practical experience with GRC Access Control across ARM, ARA, BRM and EAM.
• Working knowledge of Identity and Access Management.
• Exposure to cloud security in at least one hyperscaler (Azure, AWS or GCP).
• Familiarity with ISO 27001 and NIST as reference frameworks.

Nice to have

• SAP Cloud Identity Services.
• SAP BTP Security.

Why this project

• Long term, full time, with continuity beyond the first delivery.
• 100% remote, no relocation and no office days.
• Real ownership: you define the standard; you do not inherit it.
• Direct collaboration with the internal functional and technical teams.
• Scope that goes past role maintenance: GRC, IAM and SOC build-up.

#SAPSecurity #S4HANA #SAPGRC #IAM #CyberSecurity #FreelanceIT #Shakers