SAP Cloud ERP Security

Job Description

Role: SAP Cloud ERP Security & IAM Lead

\n

Location: Chicago, IL Remote (Only EST and CST time zone)

\n

Duration: 12 Months

\n

\n

Role Summary

\n

Lead SAP S/4HANA Cloud Public Edition security, identity, authorization, and access governance in a post-go-live environment.

\n

Key Responsibilities

\n

\n
• Design and govern business roles, catalogs, IAM apps, and authorization restrictions.

\n

• Manage user lifecycle, role assignments, least-privilege access, and segregation of duties (SoD).

\n

• Govern SAP Cloud Identity Services, including Identity Authentication and Identity Provisioning.

\n

• Lead access reviews, risk remediation, privileged access governance, and audit readiness.

\n

• Troubleshoot production access issues and manage security incidents.

\n

• Assess SAP releases, validate authorization changes, and ensure security regression testing.

\n

• Coordinate with Corporate IAM, HR, Audit, Compliance, SAP functional teams, and BTP teams.

\n

• Improve access automation, monitoring, role simplification, and operational efficiency.

\n

\n

Required Qualifications

\n

\n
• Bachelor’s degree or equivalent professional experience.

\n

• 8+ years of SAP Security, Authorization, or IAM experience.

\n

• Hands-on SAP S/4HANA security experience, preferably Public Cloud Edition.

\n

• Strong knowledge of business-role design, organizational restrictions, SoD, and user lifecycle management.

\n

• Experience with SAP Cloud Identity Services, SSO, provisioning, audits, and production support.

\n

\n

Preferred Skills

\n

\n
• SAP Cloud Identity Access Governance or enterprise IGA/GRC tools.

\n

• Microsoft Entra ID, SAP BTP, Ariba, and Fieldglass access governance.

\n

• Knowledge of SOX, ITGC, ISO 27001, NIST, and ITIL.

\n

\n