SAP Security & Access Lead (S/4HANA, Ariba, SAC)

MAM Gruppe; Chicago (IL); On-site; USD 131,000 - 160,000; Full time

Job summary

MAM Gruppe seeks a SAP Security & Access Management Consultant to own SAP security design across S/4HANA, Ariba, SAC and SuccessFactors, managed via Central User Administration. You will lead RBAC, SoD controls and access reviews within a large enterprise SAP landscape in Chicago.

The role covers user provisioning, role design, audit automation with Fastpath (Delinea), and collaboration with architects to align security with cross-module integration.

Qualifications

• 6+ years hands-on SAP security and access management across CUA and Firefighter provisioning.
• S/4HANA security experience required; Ariba, SAC, or Data Sphere experience highly desirable.
• At least 2 full lifecycle implementations or upgrade projects involving SAP ECC/S/4HANA security and access design.
• Extensive experience with RBAC, SoD, and access-review/remediation processes.
• Direct experience implementing and administering Fastpath (Delinea) or a comparable platform.
• In-depth knowledge of security master data: roles, composite roles, authorization objects, and org-level restrictions.
• Experience supporting SOX/ITGC controls, access certifications, and audit evidence gathering.
• Working exposure to ABAP, OSS Notes, eCATT, ALE, and IMG configuration.

Responsibilities

• Administer SAP security and access controls across S/4HANA and Ariba, ensuring ongoing SOX/SoD compliance
• Manage user provisioning, role design, and access governance using SAP CUA, Firefighter, and Active Directory
• Lead the implementation of Fastpath (Delinea) or a similar audit automation/access-review platform, and drive its ongoing utilization
• Provide functional support for security-related reports, interfaces, and enhancements, and prepare technical design documents for ABAP programming where needed
• Support internal and external SOX/ITGC audits, periodic access reviews, and risk remediation efforts
• Partner with the Enterprise SAP Architect, Integration Architect, and functional module leads so security design aligns with cross-module integration standards
• Support the AMS partner's access-related work, holding them accountable to SLAs while retaining internal ownership of security decisions
• Own current and new security/access localization in M&A locations, and guide external consultants on localization requests

Skills

SAP security

SoD & RBAC

Access governance

CUA provisioning

Audit & SOX ITGC

S/4HANA security

Ariba/SAC security

ABAP basics

Education

Bachelor's degree in business or information technology

SAP Security certification or CISA/CISSP

Tools

Fastpath (Delinea)

Active Directory

CUA (Central User Administration)

Job description

MAM Gruppe seeks a SAP Security & Access Management Consultant to own SAP security design across S/4HANA, Ariba, SAC and SuccessFactors, managed via Central User Administration. You will lead RBAC, SoD controls and access reviews within a large enterprise SAP landscape in Chicago.

The role covers user provisioning, role design, audit automation with Fastpath (Delinea), and collaboration with architects to align security with cross-module integration.