Lead - SAP Basis

Qiddiya; Riyadh; On-site; SAR 240,000 - 420,000; Full time

Job summary

Qiddiya is hiring an Assistant Manager to lead SAP Basis, security, and governance across hybrid environments. The role covers administration, access control, and compliance for S/4HANA, BTP, Ariba, and related SAP applications.

You will own security design, role provisioning, and SoD controls, while coordinating with infrastructure and cloud teams to ensure uptime and audit readiness. Strong leadership and hands-on SAP experience are required.

Qualifications

• Bachelor's degree in IT, Computer Science, Engineering, or related field.
• 8–10+ years of SAP Basis & Security experience.
• Hands-on with SAP S/4HANA and cloud security; GRC/IAG preferred.

Responsibilities

• Lead SAP Basis administration for S/4HANA and related platforms, covering monitoring, performance tuning, and troubleshooting.
• Manage transports, system refreshes, upgrades, patches, and kernel updates; ensure SLAs.
• Design and maintain SAP roles and authorization structures following least privilege and SoD principles.
• Coordinate with infrastructure, cloud, and database teams to ensure availability and compliance with audits.
• Configure and support SAP GRC modules (ARA, ARM, EAM, BRM) and IAG for cloud governance.
• Implement SAP cloud security (BTP, IAS, IPS, Work Zone) and SSO configurations.
• Oversee security for MDG, Ariba, and SuccessFactors; ensure secure integration with S/4HANA.
• Design and implement SSO (SAML 2.0, OAuth) and federation across SAP ecosystem.
• Support incidents, change, and problem management; provide audit evidence and documentation.

Skills

Leadership

Stakeholder communication

Incident management

Ownership & accountability

Security governance

Audit readiness

Hybrid SAP environments

Education

Bachelor's degree (IT/CS/Engineering)

Tools

SAP S/4HANA

SAP GRC Access Control

SAP IAG

SAP BTP security

IAS/IPS

Job description

Role Summary

The Assistant Manager – SAP Basis & Security is responsible for leading the administration, security, and governance of SAP systems across hybrid (cloud and on-premises) environments. The role ensures system stability, secure access management, compliance with audit requirements, and seamless integration across SAP applications including S/4HANA, BTP, Ariba, SuccessFactors, and MDG.

This position combines technical leadership, operational ownership, and governance accountability, aligned with enterprise-scale SAP landscapes and cybersecurity standards.

Key Responsibilities

1. SAP Basis Administration & Operations

• Lead SAP system administration for S/4HANA and related platforms, including monitoring, performance tuning, and troubleshooting
• Manage transports, system refreshes, upgrades, patches, and kernel updates
• Monitor system health, batch jobs, logs, interfaces, RFCs, and database performance
• Coordinate with infrastructure, cloud, and database teams to ensure availability and SLA compliance

2. SAP Security & Authorization

• Design and maintain SAP roles and authorization structures aligned with least privilege and SoD principles
• Manage user provisioning, role assignments, and authorization troubleshooting
• Conduct user access reviews, emergency access (firefighter), and remediation activities
• Provide audit evidence, access reports, and compliance documentation

3. SAP GRC & Access Governance

• Configure and support SAP GRC modules (ARA, ARM, EAM, BRM)
• Manage SoD rules, risk analysis, mitigation controls, and workflows
• Support SAP IAG for cloud-based access governance across SAP SaaS applications
• Lead periodic access certifications and audit remediation activities

4. SAP Cloud Security (BTP, IAS, IPS, Work Zone)

• Administer SAP BTP subaccounts, role collections, destinations, and trust configurations
• Configure IAS for SSO, identity federation, and authentication policies
• Manage IPS for user and role provisioning across SAP systems
• Support Work Zone access control and launchpad content configuration

5. SAP Application Security (MDG, Ariba, SuccessFactors)

• Manage security and access controls across SAP MDG, Ariba, and SuccessFactors
• Ensure secure integration between SAP S/4HANA and cloud systems
• Support role design, provisioning, and access troubleshooting for business users

6. Identity & Integration Security

• Design and implement SSO using SAML 2.0, OAuth, and IAS/IPS integration
• Manage authentication flows across SAP ecosystem (S/4, BTP, SaaS apps)
• Troubleshoot federation, certificates, tokens, and login failures

7. Compliance, Audit & Operations

• Ensure adherence to internal security policies, audit requirements, and cybersecurity standards
• Support audits with system logs, access controls, and compliance evidence
• Participate in incident, change, and problem management processes
• Prepare technical documentation and operational procedures

Required Skills & Experience

• Strong experience in SAP Basis & Security administration
• Expertise in SAP S/4HANA authorization and role design
• Hands‑on experience with SAP GRC Access Control and/or SAP IAG
• Experience in SAP BTP security, IAS, IPS, and SSO configurations
• Knowledge of integration security (RFC, OAuth, SAML, certificates)
• Strong understanding of SoD, audit controls, and compliance frameworks
• Experience supporting hybrid SAP environments (cloud + on‑premise)

Preferred Qualifications

• SAP certifications (Basis, Security, GRC, or BTP)
• Experience in large‑scale SAP transformation programs
• Knowledge of SAP Cloud ALM or Solution Manager

Soft Skills (Assistant Manager Level)

• Leadership mindset with ability to guide teams and vendors
• Strong stakeholder communication (business, cybersecurity, and IT)
• High ownership and accountability for critical systems
• Ability to manage incidents under pressure
• Proactive risk identification and continuous improvement focus

Education

• Bachelor’s degree in IT, Computer Science, Engineering, or related field

Experience Required

• 8–10+ yearsin SAP Basis & Security
• Strong hands‑on experience with SAP S/4HANA and SAP cloud security
• Experience in GRC/IAG implementation is highly preferred