SAP Security Control Specialist

CO-OP; United States; Hybrid; USD 61,000 - 79,000; Full time

Benefits offered by this job

Private healthcare

Pension contributions (up to 10%)

Annual bonus

Holiday: 28 days (32 with service) + 8

Gym access (Manchester HQ)

30% staff discount on Co-op products

24/7 colleague support

Training and development support

Cycle-to-work scheme

Job summary

Co-op is reshaping its Digital, Technology and Data function and seeks a SAP Security Control Specialist to design and maintain security controls across SAP platforms that support Finance, Retail, Commercial and Supply Chain. You will embed security-by-design and align with Co-op's standards while collaborating with engineers, architects and product teams.

You will influence security governance, access governance and risk management, working across a complex SAP landscape to protect critical

Qualifications

• Experience designing, implementing and maintaining security controls in SAP environments.
• Knowledge of SoD risk, RBAC models and access governance.
• Experience with SAP GRC and identity/access management principles.

Responsibilities

• Design, implement and maintain security controls across SAP platforms for secure operations.
• Manage SAP roles, authorisations and RBAC aligned to least-privilege requirements.
• Assess SoD risks and address control weaknesses.
• Embed security-by-design in system changes and delivery processes.
• Support audits and compliance activities with evidence of control effectiveness.
• Investigate SAP security issues and minimize risk and impact.
• Drive continuous improvement across the SAP environment.
• Advise stakeholders on SAP security risks and best practices.

Skills

Security controls

RBAC

SoD risk

SAP GRC

IAM

Access governance

Security governance

Stakeholder collaboration

Tools

SAP

GRC

Job description

We're open to applications from people who may require flexible working arrangements. There'll be an opportunity to discuss your flexible working requirements during the interview process, and at offer stage. We're reshaping our Digital, Technology and Data function for the future, creating new opportunities, strengthening our capability, and building clearer, more resilient ways of working so we can deliver even better services for our Co-op, our colleagues, members and customers. We're looking for a SAP Security Control Specialist to join our Enterprise Platforms team and help us keep our SAP landscape secure, compliant and resilient. In this role, you'll design, implement and continuously improve security controls across SAP platforms that support our Finance, Retail, Commercial and Supply Chain operations, helping to protect critical business systems while enabling colleagues to work effectively. Working closely with engineers, architects, product teams and security specialists, you'll ensure security is built into SAP solutions from the start, embedding security-by-design principles and keeping our controls aligned to Co-op's security standards and risk appetite. Why this role matters This is an exciting opportunity to influence security, governance and compliance across one of Co-op's most critical technology platforms. You'll help shape how security is embedded within SAP delivery, ensuring risks are managed effectively while enabling business change. It's a role where you'll combine technical expertise, problem solving and stakeholder collaboration to strengthen security controls, improve access governance and deliver meaningful improvements across a complex SAP environment.

• Design, implement and maintain security controls across SAP platforms to support secure and compliant operations
• Manage and improve SAP roles, authorisations and role-based access controls, ensuring access follows least-privilege principles and aligns to business requirements
• Assess and monitor segregation of duties (SoD) risks, identifying and addressing potential control weaknesses
• Work with engineering, architecture, product and platform teams to embed security-by-design principles into system changes, configurations and delivery processes
• Support risk, audit and compliance activities by providing security expertise, evidencing control effectiveness and ensuring controls meet regulatory and internal requirements
• Investigate and resolve SAP security and access-related issues, minimising risk and operational impact
• Review the effectiveness of existing controls and drive continuous improvement initiatives across the SAP environment
• Act as a trusted advisor to stakeholders, providing guidance on SAP security risks, controls and best practices
• Experience working with SAP security, including roles, authorisations, role-based access control (RBAC) models and access governance
• Good understanding of segregation of duties (SoD), access risk management and SAP security governance
• Experience working with SAP GRC, access governance solutions and related control frameworks
• Knowledge of identity and access management principles, including privileged access, user provisioning, role-based access control and least-privilege models
• Experience supporting security risk, audit and compliance activities within complex enterprise SAP environments
• Strong analytical and problem-solving skills, with the ability to assess risks and implement practical solutions
• Excellent communication skills, with the ability to explain technical security concepts in a clear and business-friendly way
• A proactive approach to continuous improvement and a commitment to keeping up to date with SAP security trends and best practice
• £46,400 - £60,000 plus private healthcare, pension with up to 10% employer contributions and more great benefits (Work Level 5), At Co-op, we're owned by our members. And because we're owned by you, we can do right by you. So when you join us, you're not just taking a job, you're joining a movement. We're an organisation that puts people and communities first, and we're powered by purpose. We want this to be a place where you can thrive, so you'll also receive:
• An annual bonus (based on personal and business performance)
• 28 days holiday (rising to 32 with service) plus bank holidays
• A pension with up to 10% employer contributions
• Private healthcare
• Access to a subsidised onsite gym (at our Manchester HQ)
• 30% discount on Co-op products and 10% off other brands
• Stream - early access to a percentage of your pay as you earn it
• Virtual healthcare including GP appointments, mental health support, nutrition and fitness advice
• 24/7 colleague support service
• Training and support for your development and career progression
• Cycle-to-work scheme
• A place you'll belong We're building diverse and inclusive teams that reflect the communities we serve. We welcome applications from everyone and are committed to creating a workplace where colleagues can feel like they belong, supported by our inclusive policies and the ways we work.