SAP IAM SECURITY SPECIALIST (HYBRID)

iTRTech Group; Lisboa; Hybrid; EUR 31,000 - 35,000; Full time

Job summary

iTRTech Group is seeking an SAP IAM Security Specialist for a hybrid Porto role in Portugal. You will design and improve access governance for on-premises and cloud environments, translating business requirements into secure access solutions while supporting compliance and reducing security risks.

The Senior role requires 5+ years of experience, strong SAP authorization expertise (PFCG), and familiarity with RBAC/ABAC, IGA, and ITIL/ITSM processes.

Qualifications

• 5+ years of SAP IAM Security experience.
• Strong SAP authorization expertise with PFCG roles.
• Experience designing RBAC/ABAC models and translating requirements into technical solutions.
• IGA, provisioning and full access lifecycle knowledge.
• Joiner/Mover/Leaver processes, access reviews and remediation.

Responsibilities

• Advise stakeholders on authorization concepts and SoD.
• Translate access policies into technical roles and implement models.
• Contribute to IAM/security projects, including rollouts and improvements.
• Monitor compliance and support periodic access reviews and recertifications.
• Improve security architecture, processes, policies, guidelines and documentation.
• Assess audit findings and remediation tracking.

Skills

SAP IAM

Role engineering

SoD controls

RBAC/ABAC

IGA

Access lifecycle

ITIL/ITSM

GRC knowledge

Audit remediation

Tools

SAP GRC/Access Control

Job description

SAP IAM SECURITY SPECIALIST (HYBRID PORTO)

Portuguese company hires for hybrid position.

Location: Porto/Gaia, Portugal

Only candidates already based in Portugal will be considered.

Work Model: Hybrid — 1 day onsite per week.

Language Requirements: Fluent English mandatory.

Seniority: Senior (5+ Years).

Sector: Automotive Tech.

Rate Between €2800 - 3100 RV or unipessoal (gross value).

About The Opportunity

We are looking for an SAP IAM Security Specialist to design and improve access governance and authorization models across on-premises and cloud environments. You will translate business requirements into secure access solutions, supporting compliance and reducing security risks.

Responsibilities

• Advise business stakeholders on authorization concepts and Segregation of Duties (SoD).
• Translate access policies into technical roles and implement authorization models across system landscapes.
• Contribute to IAM and security projects, including rollouts and improvements.
• Monitor compliance and critical access, supporting periodic access reviews and recertifications.
• Improve security architecture, processes, policies, guidelines and documentation.
• Assess audit findings and security risks, implementing and tracking remediation measures.

Requirements

• At least 5 years of experience as an SAP IAM Security Specialist or in a similar role.
• Strong SAP authorization expertise, including PFCG roles, role engineering and SoD rule set management.
• Experience designing RBAC/ABAC authorization models and translating business access requirements into technical solutions.
• Knowledge of Identity Governance & Administration (IGA), provisioning and the full access lifecycle: request, approval, provisioning, change and removal.
• Experience with joiner/mover/leaver processes, access reviews, recertifications and critical access management.
• Familiarity with ITIL/ITSM processes, including incident, change, problem and access request management.
• Knowledge of risk and control frameworks, control testing, audit evidence, findings management and remediation tracking; strong documentation skills covering RACI models and control descriptions.
• Experience delivering IAM/security projects using waterfall and hybrid methods. SAP GRC/Access Control knowledge is a plus.

Ideal Candidate Profile

A structured, proactive specialist who combines business process understanding with practical security expertise. You communicate complex topics clearly, collaborate with process owners and IT teams, and take ownership of secure, compliant outcomes.

5 Questions for Candidates

• How many years of experience do you have in SAP IAM and authorization management?
• Can you describe an SAP role design project involving PFCG and SoD controls?
• What experience do you have with access lifecycle management, recertifications and critical access?
• Can you share an example of an audit finding or access risk you helped remediate?
• Are you fluent in English and comfortable with one onsite day per week in Porto/Gaia and the €2800–3100 range?

Keywords

SAP IAM, SAP Authorizations, PFCG, SoD, RBAC, ABAC, IGA, Access Governance, Recertification, ITIL, SAP GRC

#00361563