SAP Access Management Lead

Wella Professionals; Leeds; Hybrid; GBP 80,000 - 100,000; Full time

Job summary

A global beauty company is seeking an SAP Access Management Lead to oversee SAP security and access management. This role requires a deep understanding of SAP security, strong leadership skills, and 10+ years of experience in regulated industries. The successful candidate will ensure compliance with regulatory frameworks while driving access management strategies in a hybrid work environment. This is a full-time position located in Leeds, UK.

Qualifications

• 10+ years of professional experience in SAP security and access management.
• Proven track record delivering SAP security in large‑scale global organizations.
• Experience implementing access control policies in regulated industries.

Responsibilities

• Design and govern SAP security and access management.
• Establish and own access management target operating model.
• Lead SAP security transformation initiatives.
• Oversee end-to-end provisioning and access lifecycle processes.

Skills

Deep understanding of SAP roles

Expertise in SoD frameworks

Strong grasp of identity governance principles

Hands‑on knowledge of ECC and S/4HANA security

Strong leadership skills

Excellent problem-solving abilities

Education

Bachelor’s degree in Computer Science or related discipline

SAP Security or GRC certification

Tools

SAP GRC

SailPoint

ARM

Job description

Position Title: SAP Access Management Lead

Location: Leeds, UK (Hybrid)

THE ROLE

The SAP Access Management Lead is accountable for designing, governing, and operating SAP security and access management across Wella’s global SAP ecosystem, including ECC, S/4HANA, and connected platforms. The role ensures that the right people have the right access at the right time, safeguarding company data, IP, and operations while complying with regulatory frameworks such as SOX, GDPR, and ISO 27001.

KEY RESPONSIBILITIES

1. Governance & Strategy

• Establish and own the SAP access management target operating model (business & IT)
• Define and operate global SoD ruleset in partnership with access & risk owners to mitigate risks
• Own all SAP access management controls, including SOX compliance
• Develop SAP security and access management strategies, roadmaps, and transformation initiatives
• Drive continuous service improvements in line with best practice and regulatory changes

2. Policy Standards & Control

• Own and enforce SAP access management policies, standards, and procedures
• Ensure quarterly access recertifications and joiner/mover/leaver processes are executed
• Monitor SAP license consumption and drive corrective actions
• Ensure security controls are embedded in new and upgraded SAP applications
• Act as point of contact for audits and own remediation of findings

3. Provisioning & Operations

• Oversee end-to-end provisioning, de‑provisioning, and access lifecycle processes
• Ensure automation efficiency and transparency in access workflows
• Manage BAU vendor services for SAP access management, ensuring SLAs and performance targets are met
• Oversee access‑related incidents and breaches to ensure swift resolution

4. Transformation & Documentation

• Lead SAP security transformation initiatives in collaboration with Audit and Cybersecurity
• Build repeatable processes, methods, and tools for access management across Wella
• Ensure complete and current documentation for all SAP security processes and controls

5. Leadership & Collaboration

• Provide strategic leadership, mentoring, and guidance to SAP access/security teams
• Collaborate with Cybersecurity, Basis, Enterprise Architecture, and business stakeholders
• Communicate complex technical concepts to non‑technical stakeholders
• Drive change and ensure alignment across diverse global teams

KEY SKILLS & COMPETENCIES

• Deep understanding of SAP roles, authorizations, and access concepts
• Expertise in SoD frameworks, access certification, and GRC tools (SAP GRC, SailPoint, ARM)
• Strong grasp of identity governance principles and regulatory requirements (SOX, GDPR, ISO)
• Hands‑on knowledge of ECC and S/4HANA core SAP security
• Strong leadership, vendor management, and change delivery skills
• Excellent problem‑solving, stakeholder engagement, and communication abilities

ESSENTIAL SKILLS, EXPERIENCE & QUALIFICATIONS

Education

• Bachelor’s degree in Computer Science, Information Systems, or a related discipline
• SAP Security or GRC certification preferred

Experience

• 10+ years of professional experience in SAP security and access management
• Proven track record delivering SAP security in large‑scale global organizations
• Experience implementing access control policies and processes in regulated industries
• Technical knowledge of SAP GRC, SailPoint ARM, and SAP core security (ECC/S/4HANA)
• Strong vendor management and audit engagement experience
• Exposure to infrastructure security and modern identity governance tools

KEY PERFORMANCE INDICATORS (KPIs)

• Access Risk KPIs: % of users with SoD violations, % mitigated risks, role recertification completion rate
• Operational KPIs: Access provisioning SLA adherence, turnaround time for access requests, incident closure time
• Audit & Compliance KPIs: Audit readiness score, % of roles reviewed quarterly, policy violation trends
• Efficiency KPIs: % of access provisioning automation, reduction in access issues escalated, reduction in dormant users

EEO OPPORTUNITIES

The Wella Company is committed to equality as set out in its Equality Policy and the Equality Act 2010. We do not discriminate on any protected characteristic and actively promote diversity and inclusion within our workforce.

EMPLOYMENT TYPE

Full Time

VACANCY

1 position available