Senior SAP Security Analyst / Administrator with GRC

Asterism IT Solutions•Holland, MI

6d•Onsite

About The Position

We are seeking a highly skilled Senior SAP Security Analyst / Administrator with GRC to support and enhance security across a global SAP landscape as part of an ongoing SAP S/4HANA transformation program. The ideal candidate will have strong hands-on experience with SAP Security, SAP GRC, SAP ECC, SAP S/4HANA, Fiori Security, SAP Ariba, and SAP cloud platforms. This role will be responsible for security design, administration, governance, compliance, audit support, and continuous improvement of SAP access controls.

Requirements

Bachelor's degree in IT, Computer Science, Information Systems, Cybersecurity, or related field, or equivalent experience.
8+ years of SAP Security experience.
Strong experience with SAP ECC and SAP S/4HANA.
Hands-on SAP Ariba experience.
Experience implementing SAP Fiori Security.
Experience supporting SAP cloud applications.
Experience supporting SAP transformation projects.
Strong knowledge of: PFCG, SU01, SU24, SU25, SU53, STAUTHTRACE, AGR tables, User administration, Authorization concepts, Role transports.
Experience with SAP ECC, S/4HANA, Fiori, Ariba, BTP, and Integration Suite.
Strong understanding of SAP GRC, SoD, compliance, and access governance.
Excellent analytical, communication, documentation, and stakeholder-management skills.

Nice To Haves

SAP BTP Security
SAP Cloud Identity Services / IAS / IPS
Microsoft Entra Identity Governance
SAP Security Architecture
Experience supporting global manufacturing organizations

Responsibilities

Design, build, test, deploy, and maintain SAP security roles across multiple SAP platforms.
Perform user provisioning, role assignments, authorization analysis, and troubleshooting.
Investigate and resolve complex SAP security and access-related issues.
Monitor and remediate authorization risks while maintaining least-privilege principles.
Lead SAP S/4HANA security design for implementations, upgrades, and enhancement projects.
Develop and maintain single, composite, and derived roles.
Design and maintain Fiori catalogs, spaces, pages, business roles, and Launchpad authorizations.
Troubleshoot Fiori authorization issues using SU53, STAUTHTRACE, /IWFND/ERROR_LOG , and Fiori Launchpad tools.
Support SAP security across SAP Ariba, SAP BTP, SAP Integration Suite, SAP IAS/IPS, SAP Analytics Cloud , and other cloud applications.
Support role design, user provisioning, SSO, identity federation, access governance, and security compliance.
Support Segregation of Duties (SoD) and internal/external audits.
Develop audit-ready security documentation and evidence.
Conduct security risk assessments and improve SAP security standards and procedures.
Lead SAP security workstreams and coordinate with functional teams, Basis, cybersecurity, audit, business stakeholders, and implementation partners.
Mentor team members and contribute to SAP security roadmaps and transformation initiatives.