Senior SAP Security & GRC Architect

SoftNice UG; Leeds; On-site; GBP 70,000 - 100,000; Full time

Job summary

SoftNice UG in the United Kingdom (Leeds) is seeking an experienced SAP Security specialist to design and maintain secure role concepts for S/4HANA, perform user provisioning, and uphold access reviews across SAP systems including GRC, BTP, and SuccessFactors integrations.

You will troubleshoot authorizations, support migrations, and implement least-privilege, zero-trust practices while coordinating with auditors and IT teams.

Qualifications

• Strong experience in SAP Security (ECC and S/4HANA).
• Hands-on expertise with SAP Fiori authorization concepts.
• Solid working knowledge of SAP GRC Access Control.
• Experience with SAP BTP security and cloud IAM.
• Strong knowledge of authorization objects, roles, and profiles.
• Familiarity with SAP Basis and integration concepts.
• Understanding of SoD, audit controls, and compliance frameworks.
• Experience working with internal/external auditors.

Responsibilities

• Design and maintain role concepts for S/4HANA (business roles, catalogs, groups)
• Perform user administration, role provisioning, and access reviews
• Conduct authorization troubleshooting (SU53, STAUTHTRACE)
• Support system conversions and upgrades (S/4)
• Implement best-practice authorization concepts (Fiori-first, business role-based)
• Configure and maintain Fiori catalogs, groups, spaces, and pages
• Manage OData service authorizations
• Integrate Fiori security with backend S/4 authorizations
• Support Fiori launchpad security and performance issues

Skills

SAP Security

Fiori authorization concepts

GRC Access Control

SAP BTP security

Cloud IAM

SOX/GDPR compliance

Job description

SoftNice UG in the United Kingdom (Leeds) is seeking an experienced SAP Security specialist to design and maintain secure role concepts for S/4HANA, perform user provisioning, and uphold access reviews across SAP systems including GRC, BTP, and SuccessFactors integrations.

You will troubleshoot authorizations, support migrations, and implement least-privilege, zero-trust practices while coordinating with auditors and IT teams.