You are responsible for SAP authorization management end-to-end — from design through role build to ongoing operations.
You act as the subject-matter authority on access, Segregation of Duties (SoD) and compliance, working closely with business units, IT and internal audit.
Develop, maintain and further develop the company-wide SAP authorization concept.
Define role models, naming conventions and authorization standards.
Ensure Segregation of Duties (SoD) and compliance requirements, including audit support.
Technical creation and maintenance of single and composite roles in SAP S/4HANA.
User and role administration including Profile Generator (PFCG), SU01, SU10.
Analyze and remediate authorization issues — from ST01 trace analysis to root-cause investigations.
Contribute to or lead authorization projects — new conceptions, rollouts, S/4HANA migrations.
Introduction or further development of GRC tools (SAP GRC Access Control) is a plus.
Manage external partners in authorization projects.
Work closely with business units, HR, internal audit and IT security.
Serve as the point of contact for internal and external audits related to SAP access rights.
Train and raise awareness among key users and process owners.

Several years of experience in SAP authorization management — you know PFCG, SU01 and authorization objects inside out.
Proven experience in designing and building SAP role models — not just operational maintenance.
Knowledge of S/4HANA authorizations and the differences compared to ECC is an advantage.
Experience with SAP GRC Access Control (ARA, ARM, EAM) is a plus — but not a requirement.
Understanding of SoD risks, compliance requirements and audit-proof documentation.
Structured, meticulous working style — authorizations allow no half measures.
Strong communication skills at all levels — with developers as well as with management or internal audit.
Fluent German, spoken and written.

SAP Authorization Manager, Security Consultant

Key skills