SAP IAM SECURITY SPECIALIST (HYBRID)

iTRTech Group; Lisboa; Hybrid; EUR 30,000 - 33,000; Full time

Benefits offered by this job

Hybrid work model

Freelancer-friendly rates

Job summary

iTRTech Group is seeking a seasoned SAP IAM Security Specialist for a hybrid Porto/Gaia role. You will shape authorization models, govern SAP security, and support audits across SAP landscapes.

The ideal candidate has 5+ years in SAP IAM, strong SAP authorization and IAM knowledge, and fluent English. This position offers a flexible hybrid model with some office presence in Porto/Gaia and global project exposure.

Qualifications

• Minimum 5 years of experience as an SAP IAM Security Specialist or in a similar role.
• Proven experience with SAP authorization management and Identity & Access Management.
• Fluent English (mandatory).

Responsibilities

• Advise business stakeholders on authorization concepts and SoD principles.
• Translate business access requirements into secure technical authorization models.
• Lead and contribute to IAM and SAP Security projects across on-prem and cloud environments.
• Monitor compliance, critical access, and support periodic access reviews and recertification processes.
• Design and continuously improve IAM architecture, governance models, security policies, and documentation.
• Analyze audit findings and security risks, implementing remediation actions.
• Collaborate with process owners and IT teams to define scalable authorization models.
• Contribute to continuous improvement initiatives across IAM and security governance.

Skills

SAP Authorization Management

PFCG Roles

Identity & Access Management

Identity Governance & Administration

Role Engineering

RBAC / ABAC

User Lifecycle Management

Access Reviews & Recertification

SoD

Job description

SAP IAM SECURITY SPECIALIST (HYBRID PORTO)

Portuguese company hires for hybrid position

Location: Porto / Vila Nova de Gaia, Portugal

Only candidates already based in Portugal will be considered.

Work Model: Hybrid - Average of 3-4 days per month in the office (may vary according to project needs)

Language Requirements: English - Fluent (Mandatory)

Seniority: Senior (5+ years)

Sector: Automotive Technology

Rate Between €2700 - 3000 RV (gross value)

About The Opportunity

We are looking for an experienced SAP IAM Security Specialist who is passionate about Identity & Access Management, SAP Security, governance, and compliance.

In this role, you will collaborate with business stakeholders and technical teams to design secure authorization models, improve governance processes, and ensure compliance with security and audit requirements across SAP landscapes.

You will play a key role in defining IAM strategies, implementing scalable authorization concepts, supporting security projects, and driving continuous improvements in access governance for a global enterprise environment.

Key Responsibilities

• Advise business stakeholders on authorization concepts and Segregation of Duties (SoD) principles.
• Translate business access requirements into secure technical authorization models.
• Lead and contribute to IAM and SAP Security projects across on-premises and cloud environments.
• Monitor compliance, critical access, and support periodic access reviews and recertification processes.
• Design and continuously improve IAM architecture, governance models, security policies, and documentation.
• Analyze audit findings and security risks, implementing sustainable remediation actions.
• Collaborate with business process owners and IT teams to define scalable authorization models.
• Contribute to continuous improvement initiatives across IAM and security governance.

Required Qualifications

• Minimum 5 years of experience as an SAP IAM Security Specialist or in a similar role.
• Proven experience with SAP authorization management and Identity & Access Management.
• Fluent English (mandatory).

Required Technical Skills

SAP Security & IAM

• SAP Authorization Management
• PFCG Roles
• Identity & Access Management (IAM)
• Identity Governance & Administration (IGA)
• Role Engineering
• RBAC / ABAC Authorization Models
• User Lifecycle Management (Joiner / Mover / Leaver)
• Access Reviews & Recertification
• Critical Access Management
• Segregation of Duties (SoD)
• SAP GRC / Access Control (nice to have)

Governance, Risk & Compliance

• Security Governance
• Compliance Monitoring
• Internal Controls
• Audit Preparation
• Audit Evidence Management
• Risk Assessment
• Remediation Tracking
• Policy & Procedure Documentation
• RACI Models

IT Operations

• ITIL
• IT Service Management
• Incident Management
• Change Management
• Problem Management
• Access Request Processes

Project Delivery

• Waterfall Methodology
• Hybrid Project Delivery

What We're Looking For

• Strong understanding of business processes and SAP authorization concepts.
• Ability to translate business requirements into scalable security solutions.
• Excellent analytical and problem-solving skills.
• Strong communication skills with both technical and non-technical stakeholders.
• Proactive attitude with a strong sense of ownership.
• Highly organized professional with excellent documentation skills.
• Ability to prioritize work in dynamic enterprise environments.
• Passion for governance, compliance, and continuous improvement.

Ideal Candidate Profile

The ideal candidate has extensive experience in SAP IAM Security, combining deep technical expertise with a solid understanding of governance, compliance, and business processes. You are comfortable designing authorization models, managing identity lifecycles, supporting audit activities, and implementing secure access strategies across SAP environments. You communicate effectively with business and technical teams, proactively identify risks, and contribute to building scalable, compliant, and secure enterprise solutions.

Before Applying, Ask Yourself

• Do you have 5+ years of experience in SAP Security or Identity & Access Management?
• Have you worked extensively with SAP Authorizations (PFCG)?
• Are you experienced in Segregation of Duties (SoD) governance?
• Do you have knowledge of RBAC, ABAC, and role engineering?
• Have you worked with Identity Governance & Administration (IGA) and user lifecycle management?
• Do you have experience supporting access reviews, recertification, and compliance processes?
• Have you participated in audit preparation and remediation activities?
• Are you familiar with ITIL and IT Service Management processes?
• Can you communicate fluently in English?
• Are you available to work in a hybrid model in Porto/Gaia?

Why Join This Project?

• Work on strategic SAP Security and IAM initiatives within an international organization.
• Contribute to large-scale governance, compliance, and digital transformation projects.
• Collaborate with experienced global teams in a modern enterprise environment.
• Influence security architecture and access governance across complex SAP landscapes.
• Enjoy a flexible hybrid model with limited on-site presence.
• Freelancer profiles are welcome, with flexible rates for candidates who closely match the role requirements.

Keywords for Your CV

SAP IAM, SAP Security, SAP Authorization, PFCG, Identity and Access Management, IAM, Identity Governance, IGA, Identity Governance and Administration, RBAC, ABAC, Role Engineering, Segregation of Duties, SoD, SAP GRC, SAP Access Control, Access Management, User Lifecycle Management, Joiner Mover Leaver, Access Review, Recertification, Compliance, Governance, Audit, Risk Management, Internal Controls, ITIL, IT Service Management, Incident Management, Change Management, Problem Management, Security Governance, Authorization Design, Automotive, Hybrid, Porto, English, SAP Security Specialist

#00347158