Sr SAP Security Engineer - HANA

Mckesson Corporation; Cork; On-site; EUR 66,000 - 110,000; Full time

Benefits offered by this job

Total Rewards

Competitive compensation

Job summary

McKesson is seeking a Senior SAP HANA Security Engineer (P4) to design, implement, and govern SAP security across HANA environments and SAP GRC. You will own privilege design, access governance, and enforcement while aligning with enterprise security and compliance requirements.

Collaborating with Cybersecurity, IAM, Basis, and Audit teams, you will drive secure architecture, incident response, and continuous improvement of security controls, ensuring threat detection, encryption, and risk

Qualifications

• Strong SAP Security expertise across SAP GRC, HANA environments.
• 7+ years of progressive SAP Security experience with senior ownership of complex authorization design and governance.
• Hands-on experience configuring SAP HANA security, including users, roles, privileges, and troubleshooting.
• Experience with SAP authorizations and role design, SoD principles, and governance across multi-system landscapes.
• Experience with SAP GRC Access Control and risk analysis, remediation, and privileged-access governance.
• Experience supporting SOX/ITGC in regulated environments.
• Bachelor's degree or equivalent combination of education and relevant experience.

Responsibilities

• Lead design and implement SAP security architecture across SAP HANA environments.
• Design and maintain HANA security controls: users, roles, privileges, and access governance.
• Configure HANA-level access controls for data access and reporting per regulatory requirements.
• Drive SAP access governance and SoD controls aligned with SOX/ITGC.
• Ensure HANA security includes encryption, key management, secure storage.
• Integrate SAP security with IAM platforms (SailPoint) and SAP GRC capabilities.
• Enable threat visibility via monitoring, logging, and detection across SAP systems.
• Provide Level 3–4 production support, incident response, RCA, and improvements.
• Design security solutions to enhance platform resilience and align with cyber resiliency.
• Drive automation, process optimization, and control standardization.
• Mentor engineers as an SAP HANA security SME.

Skills

SAP Security

SAP GRC

HANA Security

Authorization design

Role engineering

Access governance

SoD controls

SOX ITGC

Audit readiness

SailPoint

IAM integration

Education

Bachelor's degree or equivalent combination of education and relevant experience

Job description

McKesson is an impact-driven, Fortune 10 company that touches virtually every aspect of healthcare. We are known for delivering insights, products, and services that make quality care more accessible and affordable. Here, we focus on the health, happiness, and well‑being of you and those we serve – we care.

What you do at McKesson matters. We foster a culture where you can grow, make an impact, and are empowered to bring new ideas. Together, we thrive as we shape the future of health for patients, our communities, and our people. If you want to be part of tomorrow’s health today, we want to hear from you.

Position Summary (Purpose of job):

The Senior SAP HANA Security Engineer (P4) is a senior technical subject matter expert responsible for the design, implementation, and governance of SAP security across SAP HANA environments, and SAP GRC. This role serves as an expert engineer for SAP HANA database security, with hands‑on ownership of HANA privilege design, access governance, and database‑level control implementation while ensuring alignment with SAP application security, GRC, and compliance requirements.

The role drives secure architecture decisions, resolves complex production and audit‑related issues, and leads continuous improvement of SAP security capabilities. In close partnership with Cybersecurity, IAM, Basis, and Audit teams, the engineer ensures SAP security aligns with enterprise cyber architecture, Zero Trust principles, and risk management standards, including SAP GRC, SailPoint, and enterprise identity platforms.

This role strengthens enterprise cyber resiliency by designing and embedding security controls that enable threat detection and response across SAP S/4HANA, HANA and ECC environments, while ensuring alignment with SOX compliance and SOC‑driven monitoring expectations.

• Lead the design and implementation of SAP security architecture across SAP HANA environments, with a primary focus on SAP HANA database security, privilege design, and access governance.
• Design, implement, and maintain HANA database security controls, including users, roles, and privilege models (object, system, analytic, and package privileges), ensuring least‑privilege access and protection of sensitive data.
• Configure and enforce HANA‑level access controls for data access and reporting, including analytic privileges and data‑level restrictions aligned to regulatory and privacy requirements.
• Drive SAP access governance and GRC controls, including Segregation of Duties (SoD) and audit‑ready control design aligned with SOX / ITGC requirements.
• Ensure HANA database security includes encryption, key management, and secure storage practices aligned with enterprise data protection standards.
• Integrate SAP security with enterprise IAM platforms (SailPoint) and SAP GRC capabilities to support consistent access governance and risk management.
• Enable threat visibility and security telemetry integration across SAP systems through monitoring, logging, and detection capabilities.
• Provide Level 3–4 production support, leading incident response, restoring service, performing root cause analysis (RCA), and driving long‑term improvements.
• Design SAP security solutions that enhance platform resilience, ensuring alignment with enterprise cyber resiliency objectives.
• Drive continuous improvement through automation, process optimization, and control standardization.
• Provide technical leadership and mentorship as an SME in SAP HANA security.

Required Skills:

• Strong expertise in SAP Security across SAP GRC, HANA environments.
• 7+ years of progressive SAP Security experience, including senior‑level ownership of complex SAP authorization design, role engineering, access governance, troubleshooting, or security architecture.
• Candidates with comparable senior‑level experience and demonstrated depth across these responsibilities should also be considered.
• Hands‑on experience configuring SAP HANA security, including users, roles, privileges, database‑level access controls, and security troubleshooting.
• Demonstrated experience with SAP authorizations and role design and SoD principles. Experience securing SAP S/4HANA environments and supporting SAP role design, access provisioning, troubleshooting, and governance across complex, multi‑system landscapes.
• Experience with SAP GRC Access Control, including one or more of ARA, ARM, BRM, or EAM, and practical knowledge of risk analysis, mitigation, remediation, and privileged‑access governance.
• Experience supporting SOX, ITGC, audit‑readiness, control testing, evidence collection, and remediation activities in a regulated environment.
• Experience independently diagnosing and resolving complex SAP and HANA access and authorization issues across application, Fiori, interface, and database layers.
  Bachelor's degree or equivalent combination of education and relevant experience.

Preferred Skills/Experience

Experience with SAP RISE, cloud ERP security, or SAP S/4HANA transformation programs.

Experience with SAP Fiori Security, including catalogs, groups, spaces, pages, OData services, and front‑end/back‑end authorization concepts.

Experience with SAP BTP security, secure SAP integrations, RFC/interface security, trusted systems, technical users, and service accounts.

Experience integrating SAP access governance with IAM or IGA platforms such as SailPoint, Saviynt, Okta, or Microsoft Entra ID.

Experience with SAP security automation, scripting, APIs, workflow optimization, controls monitoring, or reporting.

SAP Security, SAP GRC, SAP HANA, CISSP, CISM, or related professional certification.

Experience mentoring engineers, influencing architecture decisions, and communicating complex SAP security risks to technical and business stakeholders.

At McKesson, we care about the well‑being of the patients and communities we serve, and that starts with caring for our people. That’s why we have a Total Rewards package that includes comprehensive benefits to support physical, mental, and financial well‑being. Our Total Rewards offerings serve the different needs of our diverse employee population and ensure they are the healthiest versions of themselves.

As part of Total Rewards, we are proud to offer a competitive compensation package at McKesson. This is determined by several factors, including performance, experience and skills, equity, regular job market evaluations, and geographical markets. The pay range shown below is aligned with McKesson's pay philosophy, and pay will always be compliant with any applicable regulations. In addition to base pay, other compensation, such as an annual bonus or long‑term incentive opportunities may be offered.

Our Base Pay Range for this position

€66,000 - €110,000