SAP Security Architect

QUINTESSENTIAL BRANDS UK GROUP LTD; Salford; On-site; GBP 90,000 - 130,000; Full time

Benefits offered by this job

Competitive salary

Global transformation projects

Certification support

Job summary

ESP Global Services is seeking an experienced SAP Security Architect to lead security design and governance for enterprise SAP landscapes. You will guide ECC and S/4HANA security, ensure compliance, and collaborate with enterprise architects to deliver secure, scalable solutions.

You will drive authorisation models, SoD governance, and IAM integrations across on-premises and cloud environments, shaping security strategy during SAP transformations.

Qualifications

• Minimum 10-12 years' SAP Security experience.
• Proven delivery of at least one SAP ECC to S/4HANA migration.
• Strong architecture design of SAP security across ECC and S/4HANA.
• Expert knowledge of SAP authorisations and role design.
• Experience integrating SAP with IAM and SSO technologies.
• Knowledge of SOX and GDPR compliance frameworks.

Responsibilities

• Design enterprise SAP security architectures across ECC, S/4HANA and hybrid cloud.
• Govern SAP authorisations, role design and access management standards.
• Maintain SoD controls and governance frameworks.
• Configure SAP security roles across ECC, S/4HANA, Fiori and GRC.
• Lead SAP security risk assessments and remediation activities.
• Support audit readiness and regulatory compliance.
• Collaborate with stakeholders to deliver secure solutions aligned to architecture.

Skills

SAP Security

Security Architecture

GRC Access Control

GRC Process Control

Fiori Security

S/4HANA Migration

SSO / SAML

Identity and Access Management

SOX & GDPR

Tools

SAP GRC

SAP HANA

Job description

• Location Orange Tower, MediaCity UK,Salford Greater Manchester,Salford, M50 2HF,United Kingdom
• Employee Type ESP - Fixed Term Employee

SAP Security Architect

Location: Manchester, United Kingdom
Employment Type: Full Time, Permanent

Secure the Future of Enterprise SAP

At ESP Global Services, we deliver mission-critical technology services to some of the world's most recognised organisations. As our customers continue to modernise their SAP estates, we are seeking an experienced SAP Security Architect to lead the design, governance and implementation of enterprise security solutions across complex SAP landscapes.

This is an opportunity to shape security strategy during large-scale SAP transformation programmes, including ECC to SAP S/4HANA migrations, while working alongside experienced enterprise architects, infrastructure specialists and business stakeholders.

If you enjoy solving complex security challenges, influencing enterprise architecture and delivering secure-by-design SAP environments, we'd like to hear from you.

The Role

As SAP Security Architect, you will own the security architecture for SAP platforms, ensuring security, compliance and governance are embedded throughout the solution lifecycle.

You will provide technical leadership across both existing SAP ECC environments and future SAP S/4HANA platforms, helping customers modernise their security model whilst maintaining business continuity and regulatory compliance.

Working closely with project teams, enterprise architects, infrastructure teams and business stakeholders, you will design scalable security frameworks that support both cloud and hybrid SAP environments.

Key Responsibilities

You will be responsible for:

• Designing enterprise SAP security architectures across SAP ECC, SAP S/4HANA and hybrid cloud environments.
• Developing and governing SAP authorisation strategies, role design and access management standards.
• Designing and maintaining Segregation of Duties (SoD) controls and governance frameworks.
• Configuring and governing SAP security roles across SAP ECC, SAP S/4HANA, SAP Fiori and SAP GRC.
• Integrating SAP environments with enterprise Identity and Access Management (IAM) platforms using Single Sign-On (SSO), SAML and related authentication technologies.
• Leading SAP security risk assessments, vulnerability analysis and remediation activities.
• Supporting audit readiness and ensuring compliance with regulatory and corporate security standards.
• Working with technical and business stakeholders to deliver secure solutions aligned to enterprise architecture.

SAP ECC to SAP S/4HANA Migration Responsibilities

A significant aspect of this role is supporting enterprise transformation programmes.

You will:

• Design the security strategy for SAP ECC to SAP S/4HANA migrations.
• Redesign legacy SAP ECC roles into modern SAP S/4HANA and SAP Fiori authorisation models.
• Develop SAP HANA database security, user management and analytical privilege models.
• Lead the redesign of Segregation of Duties (SoD) rule sets during business process transformation.
• Integrate legacy and modern SAP platforms with enterprise IAM solutions.
• Conduct threat modelling and security assessments throughout the migration lifecycle.
• Ensure secure transition from traditional ABAP security models to modern SAP HANA and cloud security frameworks.
• Support programme governance, risk management and architecture decision making.

About You

We're looking for an experienced SAP Security professional who combines deep technical expertise with strong architecture and stakeholder management skills.

You will bring:

• Minimum 10-12 years' experience in SAP Security.
• Proven experience delivering at least one full lifecycle SAP ECC to SAP S/4HANA migration.
• Strong experience designing enterprise SAP security architectures.
• Expert knowledge of SAP authorisations and role design.
• Advanced knowledge of SAP HANA database security.
• Strong experience with SAP GRC Access Control and Process Control.
• Experience implementing SAP Fiori security, catalogues, groups and OData services.
• Knowledge of SU24 authorisation object maintenance and custom transaction (Z-code) remediation.
• Experience integrating SAP with enterprise IAM solutions and Single Sign-On technologies.
• Strong understanding of security governance, audit and compliance frameworks including SOX and GDPR.
• Excellent communication skills with the ability to influence both technical and business stakeholders.

Experience with one or more of the following would be advantageous:

• SAP BTP security
• Cloud security architecture (Azure, AWS or Google Cloud)
• Identity Governance and Administration (IGA) platforms
• Cyber security architecture
• Enterprise Architecture frameworks (TOGAF or equivalent)
• Security certifications such as CISSP, CISM or SAP Security certifications

Why Join ESP Global Services?

ESP Global Services is a leading provider of IT managed services, delivering innovative technology solutions to customers across aviation, retail, pharmaceuticals, logistics, financial services and other global industries.

You'll join an organisation where innovation, collaboration and customer success are at the heart of everything we do.

We offer:

• Competitive salary and benefits package.
• Opportunities to work on large-scale global transformation programmes.
• Exposure to enterprise cloud and digital transformation initiatives.
• Professional development and certification support.
• A collaborative and supportive international team.
• Career progression within a growing global technology business.