Business Application Security Specialist

Sicpa SA; España; On-site; PHP 1,200,000 - 1,500,000; Full time

Benefits offered by this job

Potential for personal development

Job summary

Sicpa SA is seeking an experienced SAP Security & IAM / SAP IAS Specialist to design and maintain secure identity and access management across SAP landscapes. This role is crucial in ensuring compliance with internal policies and supporting business efficiency.

The candidate should have at least seven years of experience in SAP Security and be fluent in English. Benefits include opportunities for personal development within a dynamic organization.

Qualifications

• At least seven years of experience in SAP Security, including experience in user and access management.
• Experience in audit, GRC, and SoD compliance.
• Strong knowledge of SAP IAS / IPS.
• Ability to understand problems and present solutions.

Responsibilities

• Define and maintain SAP security policies and procedures.
• Manage the SAP security lifecycle, including role design and deployment.
• Support internal and external audits with required evidence.
• Monitor SAP systems for unauthorized access attempts.

Skills

SAP Security & Authorizations

Audit

GRC

SoD Compliance

SAP IAS / IPS

Strong communication skills

Analytical problem-solving

Job description

Role Overview

The SAP Security & IAM / SAP IAS Specialist is responsible for designing, implementing, and maintaining secure identity and access management processes across SAP landscapes (on-premise and cloud), including SAP Identity Authentication Service (IAS). The role ensures compliance with internal policies, audit requirements, and regulatory standards while supporting business efficiency and security.

Key Responsibilities

• Define and maintain SAP security policies, standards, and procedures.
• Ensure Segregation of Duties (SoD) compliance and perform regular risk analysis.
• Manage SAP security lifecycle: role design, testing, approval, and deployment.
• Support internal and external audits (e.g., Deloitte, CMMI) with required evidence.
• Document security policies, SOPs, and access control procedures.
• Oversee end‑to‑end SAP user lifecycle and ensure access requests are controlled, approved, and tracked.
• Conduct periodic user access reviews and certifications.
• Optimize role assignments to reduce risk and license cost exposure.
• Analyze and remediate role conflicts and excessive privileges.
• Support business teams in defining appropriate access and governance.
• Administer SAP Identity Authentication Service (IAS) and integrate with SAP cloud platforms.
• Manage authentication mechanisms (SSO, MFA, identity federation) and ensure IAS is the central authentication service for SAP ecosystems.
• Support onboarding of applications into IAS and identity providers.
• Manage migration to SAP Business roles.
• Monitor SAP systems for unauthorized access attempts and privileged activity.
• Investigate incidents and coordinate remediation actions.
• Maintain security baseline and compliance controls.

Qualifications

• At least seven years of experience in SAP Security, including designing, deploying, maintaining, and supporting user and access management across different SAP systems (SAP Security & Authorizations, ECC / S/4HANA).
• Experience and expertise in audit, GRC, and SoD.
• Strong knowledge of SAP IAS / IPS (cloud identity services).
• Proven knowledge in managing third‑party service delivery.
• Strong communication skills, able to understand problems and present solutions to business partners.
• Strong analytical and problem‑solving skills.
• Ability to work with business and technical stakeholders.
• Fluent in English; knowledge of French is a plus.

Benefits

We offer an exciting and challenging role with great potential for personal development within a unique organization in a fast‑growing industry.