SAP Security Architect

Infoplus Technologies UK Limited; Reading; Hybrid; GBP 40,000 - 71,000; Full time

Job summary

Infoplus Technologies UK Limited seeks an experienced SAP Security Architect to lead an assessment of SAP ECC and S/4HANA security landscapes. This discovery and advisory engagement focuses on design, root causes of security incidents, and a strategic roadmap for a GRC implementation.

The role is based in Reading, UK, with hybrid/onsite work 3–4 days a week. Initial 3-month contract for the assessment and strategy phase, with potential extension for 12 months, to lay the foundation for a larger

Qualifications

• 12+ years of SAP Security experience with an architecture and advisory background.
• Proven expertise in both SAP ECC and SAP S/4HANA Security.
• Deep knowledge of SAP authorization concepts, role design, SoD controls, and user provisioning.
• Hands-on experience with SAP GRC Access Control, Risk Analysis & Remediation (RAR), Access Request Management (ARM), Emergency Access Management (EAM), and Business Role Management (BRM).
• Experience conducting SAP Security assessments, audits, and transformation programs.
• Strong stakeholder management and executive presentation skills.
• Experience defining security operating models and governance frameworks.
• Previous SAP security transformation or GRC implementation leadership experience is preferred.
• Exposure to SAP Fiori, BTP, Identity & Access Governance (IAG), and cloud security concepts is preferred.
• Experience working with external auditors and compliance teams is preferred.

Responsibilities

• Conduct an end-to-end assessment of our current SAP security and authorization architecture across ECC and S/4HANA.
• Review roles, profiles, authorizations, segregation of duties (SoD), emergency access, and privileged access controls.
• Analyze security incidents and identify underlying design, process, governance, or operational gaps.
• Assess our current SAP GRC capabilities, processes, and controls.
• Evaluate compliance with security best practices and audit requirements.
• Facilitate workshops with business, IT, audit, and compliance stakeholders.
• Define key security pain points, risks, and remediation priorities.
• Develop target-state SAP Security and GRC architecture recommendations.
• Prepare a high-level roadmap, effort estimate, and implementation approach for the planned GRC transformation program.
• Present findings and recommendations to senior stakeholders and project sponsors.
• Produce a current-state security assessment report.
• Deliver security incident root-cause analysis.
• Complete a risk and control gap assessment.
• Provide high-level target architecture and design recommendations.
• Create an SAP GRC implementation roadmap.
• Contribute business case inputs and implementation readiness recommendations.

Skills

SAP Security

ECC/S4HANA Security

SoD controls

Security governance

Tools

GRC Access Control

Risk Analysis & Remediation

Access Request Management

Emergency Access Management

BRM

Job description

Salary: £40,000 - 71,000 per year

Requirements:

• 12+ years of SAP Security experience with a strong architecture and advisory background.
• Proven expertise in both SAP ECC and SAP S/4HANA Security.
• Deep knowledge of SAP authorization concepts, role design, SoD controls, and user provisioning.
• Hands-on experience with SAP GRC Access Control, Risk Analysis & Remediation (RAR), Access Request Management (ARM), Emergency Access Management (EAM), and Business Role Management (BRM).
• Experience conducting SAP Security assessments, audits, and transformation programs.
• Strong stakeholder management and executive presentation skills.
• Experience defining security operating models and governance frameworks.
• Previous SAP security transformation or GRC implementation leadership experience is preferred.
• Exposure to SAP Fiori, BTP, Identity & Access Governance (IAG), and cloud security concepts is preferred.
• Experience working with external auditors and compliance teams is preferred.

Responsibilities:

• Conduct an end-to-end assessment of our current SAP security and authorization architecture across ECC and S/4HANA.
• Review roles, profiles, authorizations, segregation of duties (SoD), emergency access, and privileged access controls.
• Analyze security incidents and identify underlying design, process, governance, or operational gaps.
• Assess our current SAP GRC capabilities, processes, and controls.
• Evaluate compliance with security best practices and audit requirements.
• Facilitate workshops with business, IT, audit, and compliance stakeholders.
• Define key security pain points, risks, and remediation priorities.
• Develop target-state SAP Security and GRC architecture recommendations.
• Prepare a high-level roadmap, effort estimate, and implementation approach for the planned GRC transformation program.
• Present findings and recommendations to senior stakeholders and project sponsors.
• Produce a current-state security assessment report.
• Deliver security incident root-cause analysis.
• Complete a risk and control gap assessment.
• Provide high-level target architecture and design recommendations.
• Create an SAP GRC implementation roadmap.
• Contribute business case inputs and implementation readiness recommendations.

Technologies:

• ARM
• Architect
• Cloud
• EAM
• SAP S/4HANA
• SAP
• SAP Fiori
• Security

More:

We are seeking an experienced SAP Security Architect to lead a comprehensive assessment of our SAP security landscape across both SAP ECC and SAP S/4HANA environments. This is a discovery and advisory engagement focused on reviewing current security design, identifying the root causes behind a high volume of security-related incidents, assessing risks and controls, and developing a strategic roadmap for a future SAP GRC implementation. The role is based in Reading, UK, with hybrid/onsite working required 3 to 4 days from the office. This is an initial 3-month contract for the assessment and strategy phase, with potential extension for 12 months. We will use this assignment to lay the foundation for a larger implementation program planned for next year.

last updated 36 week of 2026