SAP IAM Lead

Focus Cloud Limited; Greater London; Hybrid; GBP 110,000 - 140,000; Full time

Job summary

Focus Cloud Limited seeks an experienced SAP IAM Lead to drive identity and access management across SAP S/4HANA, ECC and cloud environments. This hands‑on leadership role requires designing secure access solutions and aligning with governance and audit requirements.

You will partner with security, IT and business stakeholders, implement risk‑based approval workflows, and manage SoD controls, RBAC and user lifecycle processes. Hybrid London area with 2–3 days in the office.

Qualifications

• Extensive SAP IAM experience across S/4HANA, ECC and cloud
• Deep knowledge of SoD, access risk management and audit requirements
• Proven RBAC, JML and access provisioning capabilities
• Experience integrating SAP IAM with SAP IAS/IPS and third‑party platforms

Responsibilities

• Lead design and implementation of SAP IAM and access governance
• Own role design, user provisioning and SoD mitigation across SAP apps
• Develop and manage multi‑level approval workflows and risk controls
• Collaborate with security, business and audit stakeholders to stay compliant

Skills

SAP IAM

ARA

ARM

EAM

Role design

RBAC

JML

Tools

SailPoint

SAP IAS

SAP IPS

Job description

Position: SAP IAM Lead

Employment Type: Permanent

Start: ASAP (October/November 2026)

Location: London/Hertfordshire, UK (Hybird, 2-3 days per week office)

Language(s): English

Focus on SAP is a specialist SAP and ERP Recruitment organisation offering both permanent and contract staffing solutions on a global scale.

Client - Partnered with a global leader in digital transformation and IT services, working with some of the world's biggest brands. Their mission is not only to deliver cutting-edge technology but also to empower organisations to create meaningful impact for the people and communities they serve. For you, this means working on challenging projects that demand innovation, collaboration, and thought leadership.

Role - We are seeking an experienced SAP IAM Lead to lead Identity & Access Management, SAP Security and Access Governance across complex SAP environments.

This hands‑on leadership role requires strong expertise across SAP IAM, SAP S/4HANA/ECC Security, Segregation of Duties (SoD), Role‑Based Access Control (RBAC), SAP IAS and SAP IPS.

You will lead the design and implementation of secure, compliant access solutions across SAP and cloud environments, covering identity governance, user life cycle management, role design, access provisioning, risk management and regulatory compliance.

Key Responsibilities:

• SAP IAM & Access Governance
  • Lead the design and implementation of SAP Identity & Access Management, including Access Risk Analysis (ARA), Access Request Management (ARM), Emergency Access Management (EAM) and Role Design & Provisioning (RDP).
  • Own SAP role design, authorisations, user provisioning/de‑provisioning and access request workflows across SAP S/4HANA, ECC and cloud applications.
  • Manage Segregation of Duties (SoD), critical access risks, rulesets and mitigation controls, ensuring alignment with audit and compliance requirements.
• Identity, Security & Integration
  • Design and manage user life cycle (Joiner‑Mover‑Leaver), RBAC and identity governance processes.
  • Integrate SAP IAM with SAP IAS, SAP IPS, SAP GRC and third‑party IAM platforms such as SailPoint, including cloud connectors, APIs and identity federation.
  • Configure multi‑level and risk‑based approval workflows, business rules, notifications and automated access provisioning.
• Governance & Delivery
  • Lead testing, UAT, configuration transport and production deployment across IAM and security solutions.
  • Define and maintain access governance policies, role standards, security controls and technical documentation.
  • Work closely with business, security, technology and audit stakeholders to ensure SAP access remains secure, compliant and operationally effective.

Key Skills:

• Strong hands‑on expertise across SAP IAM, particularly ARA, ARM, EAM and Role Design & Provisioning (RDP).
• Deep knowledge of SAP Security and Authorisations, including roles, profiles, authorisation objects, user administration and access control across SAP S/4HANA and ECC.
• Proven Segregation of Duties (SoD) and Access Risk Management experience, including ruleset configuration, critical access identification, mitigation controls and audit requirements.
• Strong understanding of Identity & Access Management (IAM), Role‑Based Access Control (RBAC) and Joiner‑Mover‑Leaver (JML) processes.
• Hands‑on experience with SAP IAS (Identity Authentication Service) and SAP IPS (Identity Provisioning Service), including integration across SAP applications and cloud environments.
• Strong experience designing access request, approval and provisioning workflows, including multi‑stage and risk‑based approvals.
• Strong stakeholder management, analytical and problem‑solving skills, with experience working across business, security and technical teams.

Applicants must be a UK resident and holds a valid right to work status.