SAP Cloud ERP Security

Job Description

Role: SAP Cloud ERP Security & IAM Lead

\n

Location: Chicago, IL Remote (Only EST and CST time zone)

\n

Duration: 12 Months

\n

\n

Role Summary

\n

Lead SAP S/4HANA Cloud Public Edition security, identity, authorization, and access governance in a post-go-live environment.

\n

Key Responsibilities

\n

\n
• Design and govern business roles, catalogs, IAM apps, and authorization restrictions.
\n
• Manage user lifecycle, role assignments, least-privilege access, and segregation of duties (SoD).
\n
• Govern SAP Cloud Identity Services, including Identity Authentication and Identity Provisioning.
\n
• Lead access reviews, risk remediation, privileged access governance, and audit readiness.
\n
• Troubleshoot production access issues and manage security incidents.
\n
• Assess SAP releases, validate authorization changes, and ensure security regression testing.
\n
• Coordinate with Corporate IAM, HR, Audit, Compliance, SAP functional teams, and BTP teams.
\n
• Improve access automation, monitoring, role simplification, and operational efficiency.
\n

\n

Required Qualifications

\n

\n
• Bachelor’s degree or equivalent professional experience.
\n
• 8+ years of SAP Security, Authorization, or IAM experience.
\n
• Hands-on SAP S/4HANA security experience, preferably Public Cloud Edition.
\n
• Strong knowledge of business-role design, organizational restrictions, SoD, and user lifecycle management.
\n
• Experience with SAP Cloud Identity Services, SSO, provisioning, audits, and production support.
\n

\n

Preferred Skills

\n

\n
• SAP Cloud Identity Access Governance or enterprise IGA/GRC tools.
\n
• Microsoft Entra ID, SAP BTP, Ariba, and Fieldglass access governance.
\n
• Knowledge of SOX, ITGC, ISO 27001, NIST, and ITIL.
\n

\n