SAP IAM Lead

IntecSelect; Greater London; Hybrid; GBP 90,000 - 95,000; Full time

Benefits offered by this job

Pension

Healthcare

Life assurance

Strong L&D

Job summary

IntecSelect in London is seeking a SAP IAM Lead to own identity governance across S/4HANA, ECC and cloud apps, shaping access design and provisioning in a hands-on leadership role.

You will partner with technical and business stakeholders, run SoD/risk analyses, and implement risk-based approval workflows in a hybrid London environment.

Qualifications

• Strong hands-on SAP IAM experience (ARA/ARM/EAM/RDP).
• Deep SAP authorisation knowledge (roles, profiles, objects).
• SoD and risk management, ideally with SOX/audit exposure.
• IAS/IPS integration experience.
• Comfortable working Agile/Scrum with business & tech stakeholders.
• Bonus: SAP Security/GRC certs, CISA or CISSP, ABAP or Fiori/UI5 exposure.

Responsibilities

• Implement and configure SAP IAM (ARA, ARM, EAM, RDP).
• Run SoD risk analysis; manage rulesets and mitigation controls.
• Design business/technical roles, role hierarchies and authorisations.
• Manage user provisioning, de-provisioning and access request workflows.
• Integrate with SAP IAS, IPS, GRC and non-SAP tools (e.g. SailPoint).
• Configure multi-level and risk-based approval workflows.
• Support unit/integration/UAT testing and production deployments.
• Maintain access governance documentation and standards.

Skills

SAP IAM

SOX/audit exposure

Stakeholder collaboration

Agile/Scrum

Tools

SailPoint

IAS/IPS integration

Job description

SAP IAM Lead | Permanent | London (Canary Wharf/Watford) | Hybrid

We're hiring a SAP IAM Lead to take ownership of identity governance, access control and risk management across a major, complex SAP landscape spanning S/4HANA, ECC and cloud applications. You'll be the go-to specialist for secure, compliant and efficient user access - designing and implementing IAM solutions that keep the business audit-ready while working closely with both technical and business stakeholders. It's a hands-on lead position covering everything from role design and provisioning through to SoD risk analysis and workflow configuration, with genuine scope to shape access governance standards across the organisation.

Role & Responsibilities

• Implement and configure SAP IAM (ARA, ARM, EAM, RDP)
• Run SoD risk analysis; manage rulesets and mitigation controls
• Design business/technical roles, role hierarchies and authorisations
• Manage user provisioning, de-provisioning and access request workflows
• Integrate with SAP IAS, IPS, GRC and non-SAP tools (eg SailPoint)
• Configure multi-level and risk-based approval workflows
• Support unit/integration/UAT testing and production deployments
• Maintain access governance documentation and standards

Skills & Experience

• Strong hands-on SAP IAM experience (ARA/ARM/EAM/RDP)
• Deep SAP authorisation knowledge (roles, profiles, objects)
• SoD and risk management, ideally with SOX/audit exposure
• IAS/IPS integration experience
• Comfortable working Agile/Scrum with business & tech stakeholders
• Bonus: SAP Security/GRC certs, CISA/CISSP, ABAP or Fiori/UI5 exposure

Details

• Permanent, Full time (40 hrs/week)
• London - Canary Wharf/Watford
• £90k - £95k + pension, healthcare, life assurance, strong L&D