SAP Security & Authorizations Specialist
Next Ventures are currently executing a search for an experienced SAP security and Authorisations specialist for a client in Finland.
This is essentially an onsite role with some remote working.
Applicants must be either finish residents or consultants with EU passports or relevant work permits and able to go onsite in Helsinki.
Start ASAP
Duration 6-12 months.
The SAP Security & Authorizations Specialist is responsible for designing, governing and maintaining secure, compliant and business-aligned access controls across SAP environments, including SAP S/4HANA and SAP RISE.
The role ensures that user access, security roles and authorizations are appropriately designed, assigned, reviewed and controlled in line with business requirements, segregation of duties (SoD) principles, internal security policies and regulatory obligations.
Working closely with business stakeholders, SAP platform teams, Identity and Access Management (IAM), information security, procurement and software licence management teams, the specialist will support effective access governance, audit readiness and risk mitigation across the SAP landscape.
SAP Security and Role Design
Design, develop, maintain and optimise SAP security roles and authorisation concepts across SAP ECC and S/4HANA environments, where applicable.
Translate business processes and activities into appropriate SAP roles, authorisations and user access classifications.
Ensure role design follows least-privilege principles and supports effective segregation of duties.
Review and manage role changes, user provisioning and authorisation assignments in accordance with established governance processes.
Support role redesign, remediation and access optimisation initiatives during SAP S/4HANA transformations and platform migrations.
SAP GRC Access Control
Configure, administer and support SAP Governance, Risk and Compliance (GRC) Access Control capabilities.
Perform segregation of duties (SoD) analysis, identify access risks and recommend appropriate mitigation or remediation actions.
Support access risk analysis, emergency access management, access request workflows and periodic access reviews, as applicable.
Maintain risk rules, mitigation controls and associated documentation in line with the organisation's control framework.
Investigate access conflicts and work with relevant stakeholders to agree proportionate, risk-based resolutions.
SAP RISE and Enterprise Access Governance
Govern SAP access and role changes within SAP RISE or comparable large-scale enterprise SAP environments.
Ensure access management processes align with cloud operating models, shared responsibilities and enterprise security standards.
Coordinate security-related changes with SAP platform, infrastructure, application support and IAM teams.
Maintain appropriate approval workflows, change records and audit trails for access and role modifications.
Support consistent security governance across SAP environments, systems and business units.
User Access and Classification
Assess business activities, job responsibilities and authorisation requirements to determine appropriate access and user classification outcomes.
Support the alignment of user access with SAP licence classification and software entitlement requirements, working with licence management and procurement teams.
Identify excessive, inappropriate, or conflicting authorisations and recommend corrective actions.
Ensure access decisions are supported by clear business justification, appropriate approvals and documented control requirements.
Collaborate with application owners and business process leads to validate access needs and role assignments.
Audit, Compliance and Control Evidence
Support internal and external audits relating to SAP security, authorisations, access governance and licence compliance.
Produce clear, accurate and reusable evidence demonstrating the operation of access controls and compliance with relevant policies.
Maintain documentation for role design, access reviews, SoD assessments, remediation actions, exceptions and approvals.
Track audit findings and control deficiencies through to resolution.
Promote repeatable, standardised control processes that improve audit readiness and reduce manual effort.
Stakeholder Management and Collaboration
Work collaboratively with business process owners, SAP application and platform teams, IAM, information security, procurement and software licence management.
Facilitate discussions to resolve access conflicts, agree remediation plans and establish appropriate control ownership.
Communicate technical security issues and associated business risks clearly to technical and non-technical stakeholders.
Support governance forums, design reviews, access certification exercises and continuous improvement initiatives.
Minimum 7 years' experience in SAP Security and Authorisations, including strong hands-on experience in SAP S/4HANA role design.
Demonstrable expertise in SAP GRC Access Control, including SoD analysis, risk mitigation and remediation.
Experience governing SAP access, security roles and authorisation changes within SAP RISE or comparable large enterprise SAP landscapes.
Proven ability to translate business activities, process requirements and authorisation needs into appropriate access and user classification outcomes.
Experience supporting internal and external audits, including the preparation of clear, traceable and reusable control evidence.
Strong stakeholder management skills, with experience working across business functions, SAP platform teams, IAM, security, procurement and licence management.
Good understanding of SAP authorisation concepts, role design principles, access risk management and least-privilege controls.
Experience managing access governance processes, documenting control decisions and maintaining audit trails.
Strong analytical, problem-solving and communication skills.
Ability to manage competing priorities and deliver effective outcomes in complex enterprise environments.
Desirable Skills and Experience
Experience supporting SAP S/4HANA transformation, migration or implementation programmes.
Knowledge of SAP Fiori security, including catalogues, spaces, pages and associated authorisation requirements.
Experience with SAP Access Control components such as Access Risk Analysis (ARA), Access Request Management (ARM), Emergency Access Management (EAM) and Business Role Management (BRM).
Familiarity with enterprise IAM solutions, user lifecycle management and access certification tools.
Understanding of SAP software licensing, user measurement and licence classification processes.
Experience with control frameworks, audit remediation, security standards and risk-based governance.
Relevant SAP security, GRC or information security certifications.
Key Competencies
Technical expertise: Strong SAP security, authorisation and role-design knowledge.
Risk management: Ability to identify access risks and implement effective mitigation.
Governance and compliance: Commitment to consistent controls, auditability and policy adherence.
Business understanding: Ability to align access decisions with business processes and operational requirements.
Stakeholder engagement: Confidence working across technical, commercial and business teams.
Attention to detail: Accurate documentation, evidence management and control execution.
Continuous improvement: Ability to standardise processes, improve efficiency and strengthen access governance.
The role will work closely with:
Business process owners and application owners.
SAP Security, SAP Basis and SAP platform teams.
SAP S/4HANA and SAP RISE delivery and operations teams.
Identity and Access Management (IAM).
Information Security and Governance, Risk and Compliance (GRC).
Internal Audit and external auditors.
Procurement and software licence management teams.
Change management and service delivery teams.
CV In word format
More information is available on application