SAP Authorizations Consultant – S/4HANA Security & Governance

Our client, a leading global organization in the manufacturing sector, is seeking a specialist to strengthen their access management function. The project focuses on improving governance maturity, role design quality, and audit compliance within a complex S/4HANA environment. This role is pivotal in stabilizing SAP security and enabling scalable access management during a critical transformation phase.

• Design and refine business roles aligned with S/4HANA best practices and organizational security guidelines.
• Establish an end-to-end access governance and ownership model to ensure clear accountability for approvals and reviews.
• Standardize access request workflows and approval chains to reduce operational inefficiencies and fragmentation.
• Execute strict authorization testing during SIT and UAT phases to ensure high-quality security baselines.
• Manage cutover and hypercare authorization activities while providing subject matter expertise during go-lives.
• Align disconnected service management tools and support the implementation of automation in access provisioning.

• You have 7+ years of experience in SAP Authorizations and Security.
• You bring expertise in SAP S/4HANA authorizations including Fiori, GUI, EWM, GTS, BTP, and CPI.
• You possess deep knowledge of role design using SU24, SU25, PFCG, and AGR tables.
• You have experience with Fiori catalogues, groups, spaces, and pages.
• You're familiar with SoD, SOX controls, and audit processes.
• You have hands-on experience in S/4HANA transformation programs and testing cycles.
• You possess experience implementing IAM and access governance models across the provisioning lifecycle.
• You're proactive and solution-oriented with a governance-driven mindset.
• You are fluent in English.

Nice to Haves

• Experience with Saviynt, valantic apm, or IBS CheckAud.
• Familiarity with SuccessFactors integration and HR-driven provisioning.
• Experience working in complex multi-vendor environments.

• Start date: ASAP
• Duration: until the end of the project phase
• Work regime: Full-time
• Working model: Hybrid (60% onsite)
• Contract: open to both permanent employees and freelancers