Senior SAP Security & Authorizations Architect

BrandsPost; Portugal; On-site; EUR 45,000 - 75,000; Full time

Job summary

BrandsPost in Portugal is seeking a SAP Authorizations specialist to design and maintain authorization profiles, manage user access, and support security audits. You will work closely with IT and Finance to align role design with business needs and regulatory requirements.

The ideal candidate has at least two years of hands-on SAP Authorizations experience, knowledge of S/4HANA, Fiori, and BW/BI, and proficiency with ServiceNow or ChaRM for change management.

Qualifications

• Minimum 2 years SAP Authorizations hands-on experience.
• Knowledge of SAP S/4HANA, Fiori, BW/BI and SAP landscape.
• Understanding of SoD, ITGC, internal controls, and audit/compliance requirements.
• Experience supporting SAP deployments, preferably in Finance.

Responsibilities

• Manage SAP user accounts, access permissions, authorization roles, and provisioning.
• Conduct access reviews, identify security risks, and recommend corrective actions.
• Design, implement, and maintain SAP authorization profiles and roles (single/composite).
• Troubleshoot authorization issues and provide end-user support.
• Collaborate with IT and Finance to align role design with business and security requirements.
• Support SAP security audits and ITGC implementation, SoD mitigation.
• Document security incidents and maintain access management procedures.
• Work with SAP S/4HANA, Fiori, BW/BI environments and use ServiceNow/ChaRM for changes.

Skills

SAP Authorizations

Role maintenance

Access provisioning

Troubleshooting

Access reviews

SoD / ITGC

Education

Degree in IT/Engineering

Tools

ServiceNow

ChaRM

Excel

Google Sheets

Job description

BrandsPost in Portugal is seeking a SAP Authorizations specialist to design and maintain authorization profiles, manage user access, and support security audits. You will work closely with IT and Finance to align role design with business needs and regulatory requirements.

The ideal candidate has at least two years of hands-on SAP Authorizations experience, knowledge of S/4HANA, Fiori, and BW/BI, and proficiency with ServiceNow or ChaRM for change management.