Hybrid SAP Security – Authorisation Consultant

Posted yesterday

Apply now

About the role

  • SAP Security & Authorisation consultant required to design Fiori roles and ensure compliance at BAM's UK offices. Requires extensive experience with SAP Security and leadership in complex projects.

Responsibilities

  • Establish a Fiori authorisation model including spaces/pages, catalogs, groups (if used), and launchpad roles
  • Define SoD control framework and mitigation strategy; embed with Access Control
  • Align security with identity lifecycle (joiner/mover/leaver), role provisioning, and access request workflows
  • Build and maintain PFCG roles for GUI and Fiori, including authorization field values, org-level derivations, start authorizations, and menu/content design
  • Secure Fiori Launchpad content (UI5 apps, OData services, catalogs/tiles/target mappings)
  • Create and execute security test plans (unit, functional integration, UAT, negative testing, penetrations of roles)
  • Run authorisation trace & troubleshooting (e.g., STAUTHTRACE, ST01, SU53, SUIM) and fix defects
  • Prepare cutover access plans (temporary elevated roles, firefighter strategy, emergency access) and hyper care support
  • Ensure compliance with audit requirements (SOX/ITGC/etc.), produce evidence packs, and support auditor walkthroughs
  • Document standard operating procedures, role build standards, naming conventions, and governance

Requirements

  • 8+ years SAP Security & Authorizations experience
  • At least one end-to-end S/4HANA transition (brownfield/greenfield or Central Finance)
  • Hands-on with: PFCG, SU24/SU25, SU53/SUIM, STAUTHTRACE/ST01, SEGW, SICF, /UI2/, /IWFND/, /IWBEP/*, SPRO security settings
  • Strong Fiori knowledge: catalogs, spaces/pages, tiles, target mappings, OData/IWSG, content lifecycle, FLP content manager
  • Good understanding of SAP business processes (FI, MM, SD, HR, etc)
  • Proven SoD methodology and ruleset tuning
  • Deep knowledge of authorization objects for key S/4HANA areas (FI/CO, MM, SD, CPM/PS)
  • Excellent documentation, stakeholder engagement, and ability to challenge and defend a security design diplomatically
  • Must-have: S/4HANA Fiori security, SU24/SU25, PFCG role design, SoD & GRC AC, STAUCTRACE/SU53/SUIM expertise

Benefits

  • Attractive salary
  • Significant benefits package
  • Contributory pension
  • BUPA
  • Life assurance
  • 26 days holiday (plus bank holidays)
  • Gym subsidy
  • BAM social club membership
  • Many more exciting benefits

Job title

SAP Security – Authorisation Consultant

Job type

Experience level

SeniorLead

Salary

Not specified

Degree requirement

Bachelor's Degree

Location requirements

Report this job

See something inaccurate? Let us know and we'll update the listing.

Report job