You are responsible for SAP authorization management end-to-end — from design through role build to ongoing operations.
You act as the subject-matter authority on access, Segregation of Duties (SoD) and compliance, working closely with business units, IT and internal audit.
Develop, maintain and further develop the company-wide SAP authorization concept.
Define role models, naming conventions and authorization standards.
Ensure Segregation of Duties (SoD) and compliance requirements, including audit support.
Technical creation and maintenance of single and composite roles in SAP S/4HANA.
User and role administration including Profile Generator (PFCG), SU01, SU10.
Analyze and remediate authorization issues — from ST01 trace analysis to root-cause investigations.
Contribute to or lead authorization projects — new conceptions, rollouts, S/4HANA migrations.
Introduction or further development of GRC tools (SAP GRC Access Control) is a plus.
Manage external partners in authorization projects.
Work closely with business units, HR, internal audit and IT security.
Serve as the point of contact for internal and external audits related to SAP access rights.
Train and raise awareness among key users and process owners.
Requirements
Several years of experience in SAP authorization management — you know PFCG, SU01 and authorization objects inside out.
Proven experience in designing and building SAP role models — not just operational maintenance.
Knowledge of S/4HANA authorizations and the differences compared to ECC is an advantage.
Experience with SAP GRC Access Control (ARA, ARM, EAM) is a plus — but not a requirement.
Understanding of SoD risks, compliance requirements and audit-proof documentation.
Structured, meticulous working style — authorizations allow no half measures.
Strong communication skills at all levels — with developers as well as with management or internal audit.
Fluent German, spoken and written.
Benefits
A role with genuine subject-matter responsibility — not just ticket handling.
Freedom to shape and advance the authorization landscape.
Hybrid working model with real flexibility, location Bern or Zurich.
A well-coordinated team with short decision-making paths.
Competitive compensation with opportunities for development.