Sr. SAP Security Analyst

Position Summary

We are seeking a highly skilled and experienced Senior SAP Security Analyst to support and enhance security across the company's global SAP landscape as part of its ongoing SAP S/4HANA transformation program. This role is responsible for the design, implementation, governance, and continuous improvement of SAP security controls across both on-premise and cloud-based SAP solutions.

The Senior SAP Security Analyst will serve as a subject matter expert for SAP authorization concepts, role design, compliance, audit support, and security architecture. This individual will partner closely with business process owners, SAP functional teams, Basis administrators, internal audit, cybersecurity teams, and external implementation partners to ensure secure, compliant, and scalable access management solutions.

Key Responsibilities

SAP Security Administration

• Design, build, test, deploy, and maintain SAP security roles across multiple SAP platforms.
• Support user provisioning, role assignments, troubleshooting, and authorization analysis, when needed.
• Perform complex security investigations and resolve access-related incidents.
• Monitor and remediate security risks and authorization conflicts.
• Ensure compliance with least-privilege access principles.

SAP S/4HANA Security Design

• Lead security design activities during SAP S/4HANA implementations, upgrades, and enhancement projects.
• Develop and maintain:
• Single roles
• Composite roles
• Derived roles
• Fiori catalogs
• Fiori spaces and pages
• Business roles
• Support migration activities from SAP ECC to SAP S/4HANA.

SAP Fiori Security

• Design and maintain SAP Fiori security architecture.
• Create and manage:
• Business catalogs
• Technical catalogs
• Spaces
• Pages
• Launchpad authorizations
• Troubleshoot authorization issues using:
• SU53
• STAUTHTRACE
• /IWFND/ERROR_LOG
• Fiori Launchpad tools

SAP Cloud Security

Provide security administration and governance for:

• SAP Ariba
• SAP Integration Suite
• SAP Business Technology Platform (BTP)
• SAP Cloud Identity Services (IAS/IPS)
• SAP Analytics Cloud (SAC)
• Other SAP cloud applications

Responsibilities include:

• Role design
• User provisioning
• SSO configuration
• Identity federation
• Access governance
• Security compliance

Segregation of Duties (SoD) and Compliance

• Support internal and external audits.
• Develop audit-ready documentation and evidence.

Security Governance

• Review and enhance SAP security standards and procedures.
• Review and approve security requirements for project initiatives.
• Conduct security risk assessments.
• Assist with development of enterprise SAP security roadmaps.

Project Leadership

• Lead security workstreams on SAP projects.
• Mentor other team members.
• Coordinate activities with implementation partners and consulting firms.
• Provide security estimates, planning, and project deliverables.
• Contribute to strategic security initiatives supporting Haworth's digital transformation.

Required Qualifications

Education

• Bachelor's degree in:
• Information Technology
• Computer Science
• Information Systems
• Cybersecurity
• Related field

Equivalent experience may be considered.

Experience

• 8+ years of SAP Security experience.
• Experience with SAP ECC and SAP S/4HANA.
• Experience with SAP Ariba.
• Experience implementing SAP Fiori security.
• Experience supporting SAP cloud applications.
• Experience supporting SAP transformation projects.

Required Technical Skills

SAP Security

Strong knowledge of:

• PFCG
• SU01
• SU24
• SU25
• SU53
• STAUTHTRACE
• AGR tables
• User administration
• Authorization concepts
• Role transports

SAP Platforms

Experience securing:

• SAP ECC
• SAP S/4HANA
• SAP Fiori
• SAP Ariba
• SAP BTP
• SAP Integration Suite

Preferred Qualifications

• SAP BTP Security experience
• SAP Cloud Identity Services experience
• Microsoft Entra Identity Governance experience
• Security architecture experience
• Experience supporting global manufacturing organizations