SAP IAM SECURITY JUNIOR CONSULTANT (HYBRID PORTO)
Portuguese company hires for hybrid position
Location: Porto/Gaia, Portugal
Only candidates already based in Portugal will be considered
Work Model: Hybrid — one day per week at the office
Language Requirements: Fluent English — C1 or higher
Seniority: Júnior (1+ years)
Sector: Automotive Technology
Rate Between €2100 - 2400 RV
About The Opportunity
We are looking for a motivated SAP IAM Security Junior Consultant to support an Identity and Access Management and authorization team within an international Automotive Technology environment.
You will help design and maintain user roles and access rights, process access changes and support periodic access reviews. Working closely with senior specialists and business users, you will gain valuable experience in SAP security, access governance, compliance and audit-ready documentation.
This is an excellent opportunity for a junior professional who already has initial SAP authorization experience and wants to build a long-term career in IAM and cybersecurity.
Main Responsibilities
- Support the IAM and authorization team in designing and maintaining user roles and access rights.
- Collect and clarify access requirements with business users.
- Translate business requirements into clear and structured authorization needs.
- Document access requirements, decisions and supporting evidence.
- Assist with access changes across joiner, mover and leaver processes.
- Ensure that access requests follow the defined approval workflows.
- Support access provisioning and removal activities.
- Help prepare evidence for periodic access reviews and recertification campaigns.
- Monitor pending actions and follow up with the responsible stakeholders.
- Follow established information security policies and access-control procedures.
- Maintain process documentation and standard operating procedures.
- Identify and elevate access risks, Segregation of Duties conflicts and unusual access patterns.
- Support senior team members with remediation activities.
- Use Excel and Microsoft Office tools for reporting and evidence tracking.
- Participate in task-based work packages and project delivery activities.
- Collaborate with business, IT, security and compliance stakeholders.
Mandatory Requirements
- At least one year of professional experience as a SAP IAM Security Junior Consultant or in a similar position.
- Knowledge of SAP Authorization Management.
- Basic knowledge of IAM and authorization concepts.
- Understanding of users, groups, roles and permissions.
- Familiarity with Role-Based Access Control principles.
- Basic understanding of Segregation of Duties concepts and controls.
- Familiarity with end-to-end access request processes, including request, approval, provisioning and removal.
- Ability to document requirements, decisions and evidence clearly.
- Comfortable using Excel and other Microsoft Office tools for tracking and reporting.
- Fluent English at C1 level or higher.
- Availability to work at the Porto/Gaia office once per week.
Functional Skills
- Basic understanding of access management and security controls.
- Awareness of joiner, mover and leaver processes.
- Knowledge of access reviews and recertification activities.
- Awareness of critical and privileged access handling.
- Ability to prepare clear and audit-friendly documentation.
- Willingness to understand business processes and translate them into authorization requirements.
- Ability to follow established standards, procedures and approval workflows.
- Strong attention to compliance and sensitive information.
Technical Skills
- SAP Authorization Management — mandatory.
- SAP security and role-management fundamentals.
- Identity and Access Management.
- Role-based access control.
- User, group, role and permission management.
- Access provisioning and deprovisioning.
- Exposure to service desk, ticketing or IAM tools.
- Excel and Microsoft Office.
- Basic knowledge of ITIL service processes, including incidents, requests and changes.
- Familiarity with standard operating procedures and technical documentation.
- Initial exposure to Agile methodologies such as Scrum or Kanban is beneficial.
Valued Experience
- Participation in SAP role design or maintenance.
- Experience processing joiner, mover and leaver requests.
- Exposure to Segregation of Duties analysis.
- Participation in access reviews or recertification campaigns.
- Experience preparing evidence for audits or compliance controls.
- Knowledge of SAP GRC Access Control or other IAM platforms.
- Experience with ticketing tools such as ServiceNow or Jira.
- Previous experience in automotive or technology sector.
- Exposure to Agile project environments.
Soft Skills
- Strong learning mindset and curiosity about IAM and security.
- Reliable and detail-oriented working style.
- Respect for confidential and sensitive information.
- Clear written and verbal communication.
- Ability to ask appropriate questions when requirements are unclear.
- Collaborative attitude and openness to mentoring and feedback.
- Structured approach to prioritisation, documentation and follow-up.
- Proactive identification and escalation of potential issues.
- Willingness to learn project delivery fundamentals.
- Ability to work effectively within international teams.
The Ideal Profile
The ideal candidate has initial professional experience with SAP authorizations and a solid interest in developing a career in IAM and cybersecurity.
You understand the fundamentals of roles, permissions, RBAC, access requests and Segregation of Duties. You are comfortable collecting information from business users, documenting decisions and following established approval procedures.
You are organized, attentive to detail and responsible when handling sensitive access information. You communicate fluently in English, welcome guidance from senior colleagues and are available to attend the Porto/Gaia office once per week.
Questions for Candidates
- Are you currently based within commuting distance of Porto/Gaia?
- Are you available to attend the office once per week?
- What is your English proficiency level?
- How many years of experience do you have with SAP Authorization Management?
- Which SAP authorization activities have you performed?
- Have you created, maintained or assigned SAP roles and access rights?
- What experience do you have with IAM, RBAC, users, groups, roles and permissions?
- Have you supported joiner, mover and leaver processes?
- Have you worked with Segregation of Duties conflicts or controls?
- Have you participated in access reviews or recertification campaigns?
- Have you prepared evidence or documentation for audits and compliance activities?
- Which IAM, service desk or ticketing tools have you used?What is your level of experience with Excel?
- Do you have knowledge of ITIL processes or Agile methodologies?
- What is your expected monthly rate?
- What is your availability to start?
CV Keywords
SAP IAM Security Junior Consultant, SAP IAM, SAP Security, SAP Authorization Management, SAP Authorizations, SAP Roles, SAP Role Management, Identity and Access Management, IAM, Access Management, Authorization Management, Access Governance, Role-based access control, RBAC, Users, Groups, Roles, Permissions, Access Rights, User Access Management, Joiner Mover Leaver, JML, User Lifecycle Management, Access Requests, Access Approval, Access Provisioning, Deprovisioning, Segregation of Duties, SoD, SoD Conflicts, Access Reviews, Access Recertification, Critical Access, Privileged Access, Compliance, Audit Evidence, Audit Documentation, Remediation, Security Policies, Access Controls, SAP GRC, SAP GRC Access Control, Ticket Management, Service Desk, ServiceNow, Jira, Microsoft Excel, Microsoft Office, ITIL, Incident Management, Request Management, Change Management, Standard Operating Procedures, SOP, Agile, Scrum, Kanban, Automotive Technology, English C1