SAP Security Consultant

SoftNice UG; Leeds; On-site; GBP 70,000 - 100,000; Full time

Job summary

SoftNice UG in the United Kingdom (Leeds) is seeking an experienced SAP Security specialist to design and maintain secure role concepts for S/4HANA, perform user provisioning, and uphold access reviews across SAP systems including GRC, BTP, and SuccessFactors integrations.

You will troubleshoot authorizations, support migrations, and implement least-privilege, zero-trust practices while coordinating with auditors and IT teams.

Qualifications

• Strong experience in SAP Security (ECC and S/4HANA).
• Hands-on expertise with SAP Fiori authorization concepts.
• Solid working knowledge of SAP GRC Access Control.
• Experience with SAP BTP security and cloud IAM.
• Strong knowledge of authorization objects, roles, and profiles.
• Familiarity with SAP Basis and integration concepts.
• Understanding of SoD, audit controls, and compliance frameworks.
• Experience working with internal/external auditors.

Responsibilities

• Design and maintain role concepts for S/4HANA (business roles, catalogs, groups)
• Perform user administration, role provisioning, and access reviews
• Conduct authorization troubleshooting (SU53, STAUTHTRACE)
• Support system conversions and upgrades (S/4)
• Implement best-practice authorization concepts (Fiori-first, business role-based)
• Configure and maintain Fiori catalogs, groups, spaces, and pages
• Manage OData service authorizations
• Integrate Fiori security with backend S/4 authorizations
• Support Fiori launchpad security and performance issues

Skills

SAP Security

Fiori authorization concepts

GRC Access Control

SAP BTP security

Cloud IAM

SOX/GDPR compliance

Job description

Responsibilities

• Design and maintain role concepts for S/4HANA (business roles, catalogs, groups)
• Perform user administration, role provisioning, and access reviews
• Conduct authorization troubleshooting (SU53, STAUTHTRACE)
• Support system conversions and upgrades (S/4)
• Implement best-practice authorization concepts (Fiori-first, business role-based)
• Configure and maintain Fiori catalogs, groups, spaces, and pages
• Manage OData service authorizations
• Integrate Fiori security with backend S/4 authorizations
• Support Fiori launchpad security and performance issues

SAP GRC (Access Control)

• Implement and support GRC AC modules:
  • Access Risk Analysis (ARA)
  • Access Request Management (ARM)
  • Emergency Access Management (EAM / Firefighter)
  • Business Role Management (BRM)
• Maintain SoD rule sets, mitigating controls, and workflows
• Support audit and compliance requirements (SOX, GDPR, internal audits)
• Coordinate with auditors and compliance teams
• Configure GRC for SuccessFactors and ARIBA systems

SAP BTP Security

• Configure BTP security architecture (Global Account, Subaccounts)
• Manage role collections, authorization assignments, and trust configurations
• Integrate BTP with IAS/IPS and corporate IdPs (Azure AD, etc.)
• Support secure integration between S/4HANA and BTP applications

Identity & Access Management

• Integrate SAP systems with SSO, SAML, and OAuth 2.0
• Support identity lifecycle management
• Enforce least-privilege and zero-trust security principles

Operations & Support

• Provide L3 security support
• Perform regular access reviews and cleanups activities
• Document security designs, SOPs, and controls
• Support cutovers, change transport management, and production go-lives

Required Skills & Experience

Technical Skills

• Strong experience in SAP Security (ECC and S/4HANA)
• Hands-on expertise with SAP Fiori authorization concepts
• Solid working knowledge of SAP GRC Access Control
• Experience with SAP BTP security and cloud IAM
• Strong knowledge of authorization objects, roles, profiles
• Familiarity with SAP Basis and integration concepts

Functional & Compliance Knowledge

• Understanding of SoD, audit controls, and compliance frameworks
• Experience working with internal/external auditors
• Ability to translate business requirements into secure role designs

• Experience in SAP BDC, Datasphere, SAP Analytics Cloud, and SAP SuccessFactors is desired.