Sap Security & Authorization Lead

Abb; Monza; In loco; EUR 90.000 - 120.000; Tempo pieno

Descrizione del lavoro

ABB Robotics is seeking a seasoned SAP Security & Authorization expert to shape and govern an enterprise-wide SAP S/4HANA security model within a cloud-driven ERP foundation. You will own the end-to-end lifecycle of business roles, ensure SoD controls, and coordinate with cross-functional teams across regions.

You will collaborate with the IcoFR lead, maintain governance and baseline controls, and support global rollout programs in a fast-moving environment.

Competenze

• 10+ years of SAP Security & Authorization experience.
• Bachelor degree in IT, Cybersecurity, or Business Information Management.
• SAP certification.
• Experience with global rollout programs and complex role models.
• Strong governance, risk and compliance knowledge.

Mansioni

• Design and maintain the global SAP Public Cloud authorization model.
• Own end-to-end lifecycle of Business Roles in all SAP systems.
• Ensure Minimum Baseline Security requirements are met.
• Embed SoD controls in design and processes.
• Coordinate with functional teams to map business processes to role assignments.
• Ensure consistent user provisioning across regions.
• Evaluate SAP Public Cloud releases for security impact and changes.
• Support global rollout programs with complex role models.
• Maintain governance, risk, and baseline control documentation.

Conoscenze

SAP Security

Role-based access

GRC/IAG

SoD frameworks

Identity lifecycle

Audit & compliance

SAP authorization concepts

SAP Public Cloud

Documentation

Cross-functional collaboration

Formazione

Bachelor degree in IT, Cybersecurity, or Business Information Management

SAP certification

Strumenti

SAP GRC

Scripting for role analysis

Automation tools

Descrizione del lavoro

You join ABB Robotics to help build a modern, cloud-driven ERP foundation and secure global access across regions. As part of a new IS/IT organization, you’ll shape an enterprise-wide SAP S/4HANA security model, balancing governance with business needs. You’ll work with cross-functional teams to sustain compliant role-based access and support a major ERP transformation. This is a hands-on, impact-focused role in a fast-moving, innovation-driven environment.

• dynamic and inclusive environment
• Design and maintain the global SAP Public Cloud authorization model using task- and persona-based templates
• Collaborate with the IcoFR lead to align design principles
• Own end-to-end lifecycle of Business Roles in all SAP systems
• Ensure Minimum Baseline Security requirements are met
• Embed SoD controls in design and processes
• Coordinate with functional teams to map business processes to role assignments while remaining compliant
• Ensure consistent user provisioning and account lifecycle processes across regions
• Evaluate SAP Public Cloud releases for security impact, role/catalog changes, new apps, and mandatory redesign
• 10+ years of SAP Security & Authorization experience
• Deep knowledge of task-based roles, business roles, identity lifecycle, and SAP authorization concepts
• Strong understanding of SoD frameworks, GRC/IAG, and audit & compliance requirements
• Experience with SAP Cloud Identity Services and Public Cloud
• Experience supporting global rollout programs with complex role models
• Strong documentation skills for governance, risk, and baseline control requirements
• Bachelor degree in IT, Cybersecurity, or Business Information Management
• SAP certification
• Experience in global industrial or engineering environments (manufacturing)
• Exposure to automation (e.g., SAP GRC rulesets, scripting for role analysis, automation tools)
• clear communication
• attention to governance and compliance
• SAP S/4HANA Security & Authorization
• SAP Public Cloud
• SoD frameworks (GRC/IAG)