SAP Principal Consultant - Security

Kelda Group; Bradford; Hybrid; GBP 125,000 - 150,000; Full time

Job summary

An innovative water management company in the UK is seeking an experienced SAP Security Principal to lead the development and implementation of their SAP security strategy. The role involves designing secure role builds across multiple platforms and ensuring compliance with security standards. The ideal candidate will possess strong skills in SAP GRC modules and have a proven background in managing SAP security. The company offers a flexible working environment and a competitive salary with additional benefits.

Benefits

Competitive salary

Annual incentive related bonus

Pension scheme

Development opportunities

25 days annual leave

Life assurance cover

Health cash plan scheme

Gym membership discounts

Qualifications

• Proven ability to build SAP technical and functional roles based on design outputs.
• Strong understanding of authorization concepts and user administration.
• Experience managing SAP security in various environments.

Responsibilities

• Lead design and build of SAP Security and GRC solutions.
• Ensure compliance with Segregation of Duty (SoD) and Sensitive Access rules.
• Support user provisioning and access review workflows.

Skills

SAP Security fundamentals

SAP GRC modules

Role-based access controls

User administration

Tools

SAP IDM

S/4HANA

ECC 6.0

Job description

Yorkshire Water is looking for a skilled SAP Security Principal to lead the development and implementation of our SAP security strategy. Working closely with the SAP Platforms & Security Manager, you'll design secure role builds across S/4HANA and other platforms like Ariba, SuccessFactors, Concur, and more—ensuring compliance and protecting sensitive data.

You will be the key contact for SAP security, supporting design, build, test, and release phases, while building strong relationships with internal audit and stakeholders. Experience with SAP GRC, IDM, and security analytics is essential. If you're ready to make a strategic impact in a forward‑thinking organisation, we'd love to hear from you.

Responsibilities

• Lead the design and build of SAP Security and GRC solutions.
• Contribute to the SAP security strategy aligned with enterprise security requirements.
• Interpret business requirements for SAP GRC modules including Access Request Management (ARM), Access Risk Analysis (ARA) & Emergency Access Management (EAM).
• Ensure compliance with Segregation of Duty (SoD) and Sensitive Access rules in ARA.
• Maintain Risk and Access Controls compliance throughout SAP role build.
• Support user provisioning and access review workflows in ARM.
• Maintain and support SAP Security and GRC modules.
• Provide technical support for SAP technologies including Centralised User Administration, Identity Management (IdM), Single Sign‑On, and SAP GRC.
• Ensure audit compliance and support privacy standards in reporting.
• Share SAP Security best practices and mentor junior team members.
• Stay up to date with new business processes and support security assessments.
• Enforce security policies through periodic reviews of security reports.
• Collaborate with outsourced AMS provider, and support flexible working patterns and job share options.

Qualifications and Experience

• Proven ability to build SAP technical and functional roles based on design outputs.
• Strong understanding of SAP Security fundamentals, including authorization concepts, roles/activity groups, and user administration.
• Expertise in SAP GRC modules: Access Request Management (ARM), Access Risk Analysis (ARA), Emergency Access Management (EAM).
• Ability to configure Segregation of Duty (SoD) and Sensitive Access rules in ARA.
• Experience with SAP Identity Management (SAP IDM).
• Deep knowledge of information security principles, role‑based access controls, and distributed systems administration and recovery.
• Demonstrated success in implementing SAP security users and roles to meet business requirements.
• Strong background in SAP security design, analysis, configuration, compliance, and implementation across multiple projects.
• Familiarity with security concepts and user/role administration across various SAP products.
• Experience managing SAP security in ECC 6.0, S/4HANA, and SAP Public Cloud environments.

Work Environment

We know that juggling childcare responsibilities or getting that ideal work/life balance isn’t always easy. We operate 24 hours a day, 365 days a year, and support flexible working patterns and job share options to help you make the best of both your work and home life.

Do we sound like your cup of tea? If you've got experience in SAP Security and want to help us deliver great service for our customers whilst looking after the environment, then be sure to apply today to find out what a career with Yorkshire Water can offer you.

If successful for the role, you will be required to undergo pre‑employment checks that will include a Basic Disclosure Check, carried out through a Third‑Party Company, prior to commencing employment. Depending on the role, you may also be required to go through the security vetting process for either a Counter Terrorist Check or Security Check clearance. All our roles are subject to a medical questionnaire, and further medicals when required. We are committed to removing barriers and ensuring our recruitment process is accessible to everyone.

We will discuss any reasonable adjustments required if you have an accessibility need, disability, or condition that requires changes to the recruitment process.

Kelda Group reserve the right to close this position before the published closing date, should the need occur. We therefore advise that you complete and submit your application as soon as possible.

Benefits

• We offer a competitive salary, depending on experience!
• Annual incentive related bonus (£1,000 maximum bonus opportunity for the performance year)
• Attractive pension scheme (up to 12% company contribution)
• Development opportunities in line with the SAP Principal Consultant progression plan
• 25 days annual leave plus bank holidays – plus an extra wellness day
• Life assurance cover of 4 times pensionable salary
• A great benefits package – choose from health cash plan scheme, critical illness insurance, dental insurance, life assurance flex and partner cover.
• Retail savings scheme
• Online GP service, cycle to work scheme, gym membership discounts and many more!