SAP Security & Authorizations Specialist
Next Ventures are currently executing a search for an experienced SAP security and Authorisations specialist for a client in Finland.
This is essentially an onsite role with some remote working.
Applicants must be either finish residents or consultants with EU passports or relevant work permits and able to go onsite in Helsinki.
Start ASAP
Duration 6-12 months.
The SAP Security & Authorizations Specialist is responsible for designing, governing and maintaining secure, compliant and business-aligned access controls across SAP environments, including SAP S/4HANA and SAP RISE.
The role ensures that user access, security roles and authorizations are appropriately designed, assigned, reviewed and controlled in line with business requirements, segregation of duties (SoD) principles, internal security policies and regulatory obligations.
Working closely with business stakeholders, SAP platform teams, Identity and Access Management (IAM), information security, procurement and software licence management teams, the specialist will support effective access governance, audit readiness and risk mitigation across the SAP landscape.
SAP Security and Role Design
Design, develop, maintain and optimise SAP security roles and authorisation concepts across SAP ECC and S/4HANA environments, where applicable.
Translate business processes and activities into appropriate SAP roles, authorisations and user access classifications.
Ensure role design follows least-privilege principles and supports effective segregation of duties.
Review and manage role changes, user provisioning and authorisation assignments in accordance with established governance processes.
Support role redesign, remediation and access optimisation initiatives during SAP S/4HANA transformations and platform migrations.
SAP GRC Access Control
Configure, administer and support SAP Governance, Risk and Compliance (GRC) Access Control capabilities.
Perform segregation of duties (SoD) analysis, identify access risks and recommend appropriate mitigation or remediation actions.
Support access risk analysis, emergency access management, access request workflows and periodic access reviews, as applicable.
Maintain risk rules, mitigation controls and associated documentation in line with the organisation's control framework.
Investigate access conflicts and work with relevant stakeholders to agree proportionate, risk-based resolutions.
SAP RISE and Enterprise Access Governance
Govern SAP access and role changes within SAP RISE or comparable large-scale enterprise SAP environments.
Ensure access management processes align with cloud operating models, shared responsibilities and enterprise security standards.
Coordinate security-related changes with SAP platform, infrastructure, application support and IAM teams.
Maintain appropriate approval workflows, change records and audit trails for access and role modifications.
Support consistent security governance across SAP environments, systems and business units.
User Access and Classification
Assess business activities, job responsibilities and authorisation requirements to determine appropriate access and user classification outcomes.
Support the alignment of user access with SAP licence classification and software entitlement requirements, working with licence management and procurement teams.
Identify excessive, inappropriate, or conflicting authorisations and recommend corrective actions.
Ensure access decisions are supported by clear business justification, appropriate approvals and documented control requirements.
Collaborate with application owners and business process leads to validate access needs and role assignments.
Audit, Compliance and Control Evidence
Support internal and external audits relating to SAP security, authorisations, access governance and licence compliance.
Produce clear, accurate and reusable evidence demonstrating the operation of access controls and compliance with relevant…