SAP IAM Lead

Focus on SAP; Greater London; Hybrid; GBP 90,000 - 140,000; Full time

Job summary

Focus on SAP in London/Hertfordshire, UK invites an experienced SAP IAM Lead to shape identity and access management across SAP S/4HANA, ECC and cloud.

You will own design and implementation of secure access solutions, lead SoD controls, RBAC processes and integration with SailPoint, SAP IAS and IPS, driving governance and compliance across complex SAP environments.

Qualifications

• Extensive hands-on SAP IAM experience across SAP S/4HANA and ECC.

Responsibilities

• Design and implement SAP IAM & Access Governance solutions, including ARA/ARM/EAM and RDP.

Skills

SAP IAM

Access Governance

RBAC

SoD

JML

Identity Governance

User Lifecycle

Access Provisioning

RBAC Processes

Stakeholder Management

Tools

SAP IAS

SAP IPS

SailPoint

SAP GRC

Job description

Position: SAP IAM Lead Employment Type: Permanent Start: ASAP (October/November 2026) Location: London/Hertfordshire, UK (Hybrid, 2-3 days per week office) Language(s): English

Focus on SAP is a specialist SAP and ERP Recruitment organisation offering both permanent and contract staffing solutions on a global scale.

Client - Partnered with a global leader in digital transformation and IT services, working with some of the world’s biggest brands. Their mission is not only to deliver cutting-edge technology but also to empower organisations to create meaningful impact for the people and communities they serve. For you, this means working on challenging projects that demand innovation, collaboration, and thought leadership.

Role - We are seeking an experienced SAP IAM Lead to lead Identity & Access Management, SAP Security and Access Governance across complex SAP environments.

This hands‑on leadership role requires strong expertise across SAP IAM, SAP S/4HANA/ECC Security, Segregation of Duties (SoD), Role-Based Access Control (RBAC), SAP IAS and SAP IPS.

You will lead the design and implementation of secure, compliant access solutions across SAP and cloud environments, covering identity governance, user lifecycle management, role design, access provisioning, risk management and regulatory compliance.

Key Responsibilities

• SAP IAM & Access Governance
  • Lead the design and implementation of SAP Identity & Access Management, including Access Risk Analysis (ARA), Access Request Management (ARM), Emergency Access Management (EAM) and Role Design & Provisioning (RDP).
  • Own SAP role design, authorisations, user provisioning/de-provisioning and access request workflows across SAP S/4HANA, ECC and cloud applications.
  • Manage Segregation of Duties (SoD), critical access risks, rulesets and mitigation controls, ensuring alignment with audit and compliance requirements.
• Identity, Security & Integration
  • Design and manage user lifecycle (Joiner-Mover-Leaver), RBAC and identity governance processes.
  • Integrate SAP IAM with SAP IAS, SAP IPS, SAP GRC and third‑party IAM platforms such as SailPoint, including cloud connectors, APIs and identity federation.
  • Configure multi‑level and risk‑based approval workflows, business rules, notifications and automated access provisioning.
• Governance & Delivery
  • Lead testing, UAT, configuration transport and production deployment across IAM and security solutions.
  • Define and maintain access governance policies, role standards, security controls and technical documentation.
  • Work closely with business, security, technology and audit stakeholders to ensure SAP access remains secure, compliant and operationally effective.

Key Skills

• Strong hands‑on expertise across SAP IAM, particularly ARA, ARM, EAM and Role Design & Provisioning (RDP).
• Deep knowledge of SAP Security and Authorisations, including roles, profiles, authorisation objects, user administration and access control across SAP S/4HANA and ECC.
• Proven Segregation of Duties (SoD) and Access Risk Management experience, including ruleset configuration, critical access identification, mitigation controls and audit requirements.
• Strong understanding of Identity & Access Management (IAM), Role‑Based Access Control (RBAC) and Joiner‑Mover‑Leaver (JML) processes.
• Hands‑on experience with SAP IAS (Identity Authentication Service) and SAP IPS (Identity Provisioning Service), including integration across SAP applications and cloud environments.
• Strong experience designing access request, approval and provisioning workflows, including multi‑stage and risk‑based approvals.
• Strong stakeholder management, analytical and problem‑solving skills, with experience working across business, security and technical teams.

Applicants must be a UK resident and holds a valid right to work status.