SAP Security Consultant

Falcon Smart IT (FalconSmartIT); Leeds; On-site; GBP 80,000 - 110,000; Full time

Job summary

Falcon Smart IT is seeking an experienced SAP Security specialist for a contract role in Leeds. You will design and maintain SAP security concepts, implement Fiori authorization, and support GRC Access Control and BTP security across S/4HANA landscapes.

Responsibilities include integration with IAM systems, conducting access reviews, and aligning with SOX, GDPR, and audit requirements; experience with SAP Basis and cloud integration is a plus.

Qualifications

• Strong experience in SAP Security (ECC and S/4HANA).
• Hands-on SAP Fiori authorization concepts.
• Solid knowledge of SAP GRC Access Control.
• Experience with SAP BTP security and cloud IAM.
• Understanding of authorization objects, roles, and profiles.
• Familiarity with SAP Basis and integration concepts.

Responsibilities

• Design and maintain role concepts for S/4HANA (business roles, catalogs, groups).
• Perform user administration, role provisioning, and access reviews.
• Support system conversions and upgrades (S/4).
• Implement best-practice authorization concepts (Fiori-first, RBAC).
• Configure and maintain Fiori catalogs, groups, spaces, and pages.
• Integrate Fiori security with backend S/4 authorizations.
• Support Fiori launchpad security and performance issues.
• Implement and support GRC AC modules: ARA, ARM, EAM, BRM, SoD controls.
• Coordinate with auditors and ensure SOX/GDPR compliance.
• Configure GRC for SuccessFactors and ARIBA.
• Configure BTP security architecture; manage role collections and IAS/IPS.

Skills

SAP Security

Fiori authorization

GRC Access Control

BTP security

IAM integration

Basis & integration

Job description

Job Location: Ellington House, Valley Park West, 9 Savannah Way, Leeds Valley Park, Leeds, LS10 1AB

Job Type: Contract/FTC (Starts with 6 months)

Job Description:

SAP S/4HANA Security

• Design and maintain role concepts for S/4HANA (Business Roles, Catalogs, Groups)
• Perform user administration, role provisioning, and access reviews
• Support system conversions and upgrades (S/4)
• Implement best-practice authorization concepts (Fiori-first, business role–based)
• Configure and maintain Fiori catalogs, groups, spaces, and pages
• Integrate Fiori security with backend S/4 authorizations
• Support Fiori launchpad security and performance issues

SAP GRC (Access Control)

• Implement and support GRC AC modules:
• Access Risk Analysis (ARA)
• Access Request Management (ARM)
• Emergency Access Management (EAM / Firefighter)
• Business Role Management (BRM)
• Maintain SoD rule sets, mitigating controls, and workflows
• Support audit and compliance requirements (SOX, GDPR, internal audits)
• Coordinate with auditors and compliance teams
• Configure GRC for SuccessFactors and ARIBA systems

SAP BTP Security

• Configure BTP security architecture (Global Account, Subaccounts)
• Manage Role Collections, authorization assignments, and trust configurations
• Integrate BTP with IAS / IPS and corporate IdPs (Azure AD, etc.)
• Secure BTP services (CAP, Integration Suite, Workflow, BAS)
• Support secure integration between S/4HANA and BTP applications

Identity & Access Management

• Integrate SAP systems with SSO, SAML, OAuth 2.0
• Support Identity lifecycle management
• Enforce least-privilege and zero-trust security principles

Operations & Support

• Provide L3 security support
• Perform regular access reviews and cleanups activities
• Document security designs,SOPs, and controls
• Support cutovers, change transport management, and production go-lives

Required Skills & Experience:

Technical Skills:

• Strong experience in SAP Security (ECC and S/4HANA)
• Hands‑on expertise with SAP Fiori authorization concepts
• Solid working knowledge of SAP GRC Access Control
• Experience with SAP BTP security and cloud IAM
• Strong knowledge of authorization objects, roles, profiles
• Familiarity with SAP Basis and integration concepts

Functional & Compliance Knowledge

• Understanding of SoD, audit controls, and compliance frameworks
• Experience working with internal/external auditors
• Ability to translate business requirements into secure role designs

Experience in SAP BDC, Datasphere, SAP Analytics Cloud and SAP SuccessFactors are desired.