SAP Security Consultant

OryxAlign Limited; Cape Town; On-site; ZAR 900,000 - 1,200,000; Full time

Benefits offered by this job

Leave entitlement: 15 days + volunteer

Medical aid allowance

Retirement annuity with 4% employer

Job summary

Hollybank Trustees Ltd seeks an SAP Security Consultant to manage and optimize user access across the SAP landscape. You will design and maintain role-based access, administer authorizations, and support audits to ensure compliance with security policies.

Ideal candidates have extensive hands-on SAP security administration experience, including PFCG, SU53/ST01, and governance across SOX, ITGC, and GDPR. On-site role in Bellville, Cape Town, South Africa.

Qualifications

• Extensive experience designing and maintaining SAP Security Roles using PFCG.
• Strong understanding of RBAC and least privilege principles.
• Experience with SU24 Authorization Object Maintenance.
• Experience administering users through SU01, SU10 and managing various user types.
• Familiarity with SAP Security Audit Logs, SAP Security Notes, SU53 and ST01.
• Knowledge of SOX, ITGC, GDPR and compliance frameworks.

Responsibilities

• Design, build, and maintain SAP security roles using PFCG (Single, Composite, Derived).
• Administer SAP users and authorizations via SU01, SU10; manage dialog/system/service users.
• Maintain SU24 proposals and authorization object relationships.
• Investigate authorization issues using SU53, ST01.
• Monitor SAP Security Audit Logs; support system hardening; apply SAP notes.
• Collaborate with ABAP developers and SAP Basis on security configurations.
• Support audits with compliance reporting and remediation plans.
• Provide guidance on SAP security best practices and governance.

Skills

PFCG Role Design

SOX/GDPR compliance

SAP Security Audit Logs

SoD risk mitigation

SAP Basis collaboration

Auditing and reporting

Troubleshooting SAP security

Education

SAP Security Certifications (see cert list)

Tools

PFCG

SU01

SU10

SU24

SU53

ST01

Pathlock

Job description

Location: On site / Bellville, Cape Town, South Africa
job type: Permanent / Full-time
Sector and subsector: IT | SAP
Salary: Negotiable salary

Overall Purpose

The SAP Security Consultant is responsible for managing and optimizing user access within the SAP landscape. This role is responsible for designing and maintaining role-based access, administering user authorizations, ensuring compliance with security policies, and supporting audit readiness. The successful candidate will collaborate closely with IT teams, business stakeholders, and audit teams to uphold secure, compliant, and efficient access to SAP systems while continuously improving security processes and controls.

Key Responsibilities

• Design, build, and maintain SAP security roles using the Profile Generator (PFCG), including Single, Composite, and Derived Roles, in line with the principle of least privilege.
• Administer SAP users and authorizations using SU01, SU10, and related SAP security tools.
• Manage and maintain SU24 authorization proposals and authorization object relationships.
• Investigate and resolve authorization issues using SAP tracing tools such as SU53 and ST01.
• Monitor and maintain SAP Security Audit Logs and support system hardening activities.
• Implement SAP Security Notes and support security patching requirements.
• Manage custom authorization objects and collaborate with ABAP developers to ensure appropriate authorization checks.
• Identify, assess, and mitigate Segregation of Duties (SoD) conflicts in collaboration with business stakeholders.
• Support compliance requirements including SOX, ITGC, GDPR, and internal security policies.
• Support internal and external audits by providing compliance reporting, evidence, and remediation plans.
• Collaborate with SAP Basis teams on system-level security, transport management, and security-related configurations.
• Support SAP implementations, upgrades, conversions, and migration projects.
• Produce and maintain security documentation, role design standards, and governance processes.
• Provide guidance on SAP security best practices and continuously improve security controls and processes.

Required Skills & Abilities

• Extensive experience designing and maintaining SAP Security Roles using PFCG.
• Strong understanding of role-based access control and the principle of least privilege.
• Experience with SU24 Authorization Object Check Maintenance.
• Experience administering users through SU01, SU10, and managing Dialog, System, Service, and Communication user types.
• Familiarity with SAP Security Audit Logs, SAP Security Notes, SU53, and ST01.
• Strong understanding of Segregation of Duties (SoD) principles and risk mitigation practices.
• Knowledge of SOX, ITGC, GDPR, and broader compliance frameworks.
• Ability to support audit activities and produce compliance reporting.
• Excellent communication skills with the ability to explain technical authorization concepts to non-technical stakeholders and auditors.
• Strong collaboration skills when working with SAP Basis teams, ABAP developers, and business stakeholders.
• Strong analytical and troubleshooting skills with a methodical approach to problem solving.
• Excellent documentation, stakeholder management, and prioritisation skills.

Experience and Expertise

• 3 to 5 years of hands-on SAP Security Administration and Implementation experience for mid-level candidates.
• 6+ years of SAP Security experience for senior candidates.

Extensive hands-on experience with:

• PFCG Role Design and Maintenance
• SU24 Optimization and Authorization Maintenance
• SU01 User Maintenance
• SU10 Mass User Administration
• SU53 and ST01 Troubleshooting
• SAP Security Audit Logs
• SAP Security Notes Implementation
• Experience supporting internal and external audit cycles.
• Experience identifying and mitigating Segregation of Duties (SoD) conflicts.
• Functional understanding of core SAP business processes including:
• Procure-to-Pay (P2P)
• Order-to-Cash (O2C)
• Hands-on experience with Governance, Risk and Compliance (GRC) tools.
• Experience with Pathlock Application Access Governance.
• SAP S/4HANA Security experience.
• HANA Database Security experience, including analytical, system, and object privileges.
• SAP Fiori Security experience, including Catalogs, Groups, and Spaces.
• SAP Business Technology Platform (BTP) Security experience.
• Experience with SAP security design and configuration across implementation, upgrade, conversion, and migration programmes.
• Experience supporting ECC to S/4HANA transformation projects.
• Experience facilitating risk assessment and mitigation workshops.

Certifications

• SAP Certified Technology Associate – SAP Access Control.
• SAP Certified Technology Associate – System Security with SAP NetWeaver.
• SAP Certified Security Administrator.

What You Will Get from OryxAlign

Along with a competitive salary and ongoing training and development opportunities, you will receive leave entitlement of 15 days plus one volunteer day, medical aid allowance, and retirement annuity allowance with a 4% employer contribution.

Other Benefits Include

• Social events throughout the year
• Technology Loans
• Reward and Recognition Awards

OryxAlign is an equal opportunity employer committed to creating an inclusive environment for all employees. In accordance with the Employment Equity Act of South Africa, we actively promote diversity and the fair treatment of all individuals, regardless of race, gender, disability, age, religion, sexual orientation, or any other characteristic protected by law. We encourage applications from candidates who will contribute to the diversity of our team, particularly those from historically disadvantaged groups.