Overview
Job title: SAP Security and Authorizations Specialist
VN: 2800
Location: United Kingdom
Please note: This is a full-time, permanent position with Hexagon Manufacturing Intelligence. We are not looking for freelance consultants or agency contractors—we are seeking a candidate interested in a long-term commitment as a direct member of our team.
We are seeking an experienced and detail-oriented SAP Security and Authorizations Specialist to manage and optimize user access within our SAP landscape. This role is responsible for designing and maintaining role-based access, administering user authorizations, ensuring compliance with security policies, and supporting audit readiness. The ideal candidate will collaborate closely with IT, business stakeholders, and audit teams to uphold secure, compliant, and efficient access to SAP systems while continuously improving security processes and controls.
Role Design and Maintenance
- Collaborate with GPOs to design and implement role-based access rights.
- Maintain and update role definitions and permission sets based on business evolution
User Access Management
- Administer user accounts, roles, and authorizations in SAP.
- Manage user role allocation and removal processes in line with organizational policies.
Collaboration and Support
- Work closely with IT teams, SAP CoE, and SAP functional experts to resolve access-related issues.
- Provide training and support to end-users regarding access management processes and policies.
Audit Management
- This role will also be responsible for management and resolution of all audit related topics for the applications concerned.
- As part of audit management, internal controls need to be designed, documented and tested.
- Ensure that appropriate mitigation measures are implemented where required.
- Security Compliance: Conduct regular audits and reviews of user access rights to ensure compliance with internal requirements.
- Monitor and report on security incidents related to user access.
- Evaluation and prioritization of new requirements.
Documentation and Reporting
- Develop and maintain documentation for user access processes, policies, and role definitions.
- Generate regular reports on user access metrics and compliance status for management review.
- Identify areas for process improvement within user access management and implement best practices.
- Stay updated on SAP security trends, tools, and technologies to enhance access management strategies.
Requirements
- Bachelor’s degree in Information Technology, Computer Science, Business Administration, or a related field.
- Minimum 7 years of hands-on experience in SAP Security and Authorizations.
- Proven experience in user access management, role design, and SAP security audits.
- Strong knowledge of SAP role-based access control (RBAC) concepts and user authorization management.
- Business fluent in English.
- Proficiency in managing SAP user accounts, profiles, roles, and authorizations.
- Familiarity with SAP transaction codes related to security (e.g., SU01, PFCG, SUIM, ST03N, etc.).
- Ability to design, test, and implement internal controls for user access.
- Understanding of audit principles and compliance frameworks (e.g., SOX, GDPR, ITGC).
- Experience in preparing for and responding to internal and external audits.
- Ability to define and implement mitigating controls where segregation of duties (SoD) conflicts exist.
#J-18808-Ljbffr