> Markdown version of [/jobs/ext/3330149-sap-security-control-specialist](https://www.wearedevelopers.com/jobs/ext/3330149-sap-security-control-specialist). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # SAP Security Control Specialist - **Company:** Co-op - **Location:** Manchester, UK (Remote available) - **Salary:** £46,400.0 - £60,000.0 - **Contract:** Permanent contract - **Skills:** Microsoft Access, Business Systems, Identity and Access Management, Role-Based Access Control, SAP (Applications), SAP GRC, SAP Security, User Provisioning Software, SAPBasis - **Published:** September 30, 2026 - **Apply:** https://www.jobs.service.gov.uk/jobs/6abd05bf9f844fc8ff6f4255/apply ## About the Role * Experience working with SAP security, including roles, authorisations, role-based access control (RBAC) models and access governance * Good understanding of segregation of duties (SoD), access risk management and SAP security governance * Experience working with SAP GRC, access governance solutions and related control frameworks * Knowledge of identity and access management principles, including privileged access, user provisioning, role-based access control and least-privilege models * Experience supporting security risk, audit and compliance activities within complex enterprise SAP environments * Strong analytical and problem-solving skills, with the ability to assess risks and implement practical solutions * Excellent communication skills, with the ability to explain technical security concepts in a clear and business-friendly way * A proactive approach to continuous improvement and a commitment to keeping up to date with SAP security trends and best practice ## Description We're open to applications from people who may require flexible working arrangements. There'll be an opportunity to discuss your flexible working requirements during the interview process, and at offer stage. We're reshaping our Digital, Technology and Data function for the future, creating new opportunities, strengthening our capability, and building clearer, more resilient ways of working so we can deliver even better services for our Co-op, our colleagues, members and customers. We're looking for a SAP Security Control Specialist to join our Enterprise Platforms team and help us keep our SAP landscape secure, compliant and resilient. In this role, you'll design, implement and continuously improve security controls across SAP platforms that support our Finance, Retail, Commercial and Supply Chain operations, helping to protect critical business systems while enabling colleagues to work effectively. Working closely with engineers, architects, product teams and security specialists, you'll ensure security is built into SAP solutions from the start, embedding security-by-design principles and keeping our controls aligned to Co-op's security standards and risk appetite. Why this role matters This is an exciting opportunity to influence security, governance and compliance across one of Co-op's most critical technology platforms. You'll help shape how security is embedded within SAP delivery, ensuring risks are managed effectively while enabling business change. It's a role where you'll combine technical expertise, problem solving and stakeholder collaboration to strengthen security controls, improve access governance and deliver meaningful improvements across a complex SAP environment. What you'll do * Design, implement and maintain security controls across SAP platforms to support secure and compliant operations * Manage and improve SAP roles, authorisations and role-based access controls, ensuring access follows least-privilege principles and aligns to business requirements * Assess and monitor segregation of duties (SoD) risks, identifying and addressing potential control weaknesses * Work with engineering, architecture, product and platform teams to embed security-by-design principles into system changes, configurations and delivery processes * Support risk, audit and compliance activities by providing security expertise, evidencing control effectiveness and ensuring controls meet regulatory and internal requirements * Investigate and resolve SAP security and access-related issues, minimising risk and operational impact * Review the effectiveness of existing controls and drive continuous improvement initiatives across the SAP environment * Act as a trusted advisor to stakeholders, providing guidance on SAP security risks, controls and best practices