SAP Security & Access Management Consultant

MAM Gruppe; Chicago (IL); On-site; USD 131,000 - 160,000; Full time

Job summary

MAM Gruppe seeks a SAP Security & Access Management Consultant to own SAP security design across S/4HANA, Ariba, SAC and SuccessFactors, managed via Central User Administration. You will lead RBAC, SoD controls and access reviews within a large enterprise SAP landscape in Chicago.

The role covers user provisioning, role design, audit automation with Fastpath (Delinea), and collaboration with architects to align security with cross-module integration.

Qualifications

• 6+ years hands-on SAP security and access management across CUA and Firefighter provisioning.
• S/4HANA security experience required; Ariba, SAC, or Data Sphere experience highly desirable.
• At least 2 full lifecycle implementations or upgrade projects involving SAP ECC/S/4HANA security and access design.
• Extensive experience with RBAC, SoD, and access-review/remediation processes.
• Direct experience implementing and administering Fastpath (Delinea) or a comparable platform.
• In-depth knowledge of security master data: roles, composite roles, authorization objects, and org-level restrictions.
• Experience supporting SOX/ITGC controls, access certifications, and audit evidence gathering.
• Working exposure to ABAP, OSS Notes, eCATT, ALE, and IMG configuration.

Responsibilities

• Administer SAP security and access controls across S/4HANA and Ariba, ensuring ongoing SOX/SoD compliance
• Manage user provisioning, role design, and access governance using SAP CUA, Firefighter, and Active Directory
• Lead the implementation of Fastpath (Delinea) or a similar audit automation/access-review platform, and drive its ongoing utilization
• Provide functional support for security-related reports, interfaces, and enhancements, and prepare technical design documents for ABAP programming where needed
• Support internal and external SOX/ITGC audits, periodic access reviews, and risk remediation efforts
• Partner with the Enterprise SAP Architect, Integration Architect, and functional module leads so security design aligns with cross-module integration standards
• Support the AMS partner's access-related work, holding them accountable to SLAs while retaining internal ownership of security decisions
• Own current and new security/access localization in M&A locations, and guide external consultants on localization requests

Skills

SAP security

SoD & RBAC

Access governance

CUA provisioning

Audit & SOX ITGC

S/4HANA security

Ariba/SAC security

ABAP basics

Education

Bachelor's degree in business or information technology

SAP Security certification or CISA/CISSP

Tools

Fastpath (Delinea)

Active Directory

CUA (Central User Administration)

Job description

SAP Security & Access Management Consultant

About the Role

Our industry leading client is hiring a SAP Security & Access Management Consultant to serve as the primary owner for SAP security, role design, and access governance across their SAP S/4HANA, Ariba, SAC, and SuccessFactors landscape, administered through Central User Administration (CUA).

Responsibilities

• Administer SAP security and access controls across S/4HANA and Ariba, ensuring ongoing SOX/SoD compliance
• Manage user provisioning, role design, and access governance using SAP CUA, Firefighter, and Active Directory
• Lead the implementation of Fastpath (Delinea) or a similar audit automation/access-review platform, and drive its ongoing utilization
• Provide functional support for security-related reports, interfaces, and enhancements, and prepare technical design documents for ABAP programming where needed
• Support internal and external SOX/ITGC audits, periodic access reviews, and risk remediation efforts
• Partner with the Enterprise SAP Architect, Integration Architect, and functional module leads so security design aligns with cross-module integration standards
• Support the AMS partner\'s access-related work, holding them accountable to SLAs while retaining internal ownership of security decisions
• Own current and new security/access localization in M&A locations, and guide external consultants on localization requests

Requirements

• Bachelor\'s degree in business, information technology, or a related field
• SAP Security certification or CISA/CISSP desirable
• 6+ years of hands-on experience in SAP security and access management, with strong end-to-end process knowledge across CUA and Firefighter provisioning
• SAP S/4HANA security experience required; Ariba, SAC, or Data Sphere experience highly desirable
• At least 2 full lifecycle implementations or upgrade projects involving SAP ECC/S/4HANA security and access design
• Extensive experience with RBAC, Segregation of Duties (SoD), and access-review/remediation processes
• Direct experience implementing and administering Fastpath (Delinea) or a comparable platform
• In-depth knowledge of security master data: roles, composite roles, authorization objects, and org-level restrictions
• Experience supporting SOX/ITGC controls, access certifications, and audit evidence gathering
• Working exposure to ABAP, OSS Notes, eCATT, ALE, and IMG configuration

Rate: $145,000 + bonus

#SAP #SAPSecurity #S4HANA #ITJobs #Hiring #AccessManagement