SAP Security Consultant - S/4HANA & GRC Access Control

At Shakers we are working with a global technology firm to bring in an SAP Security Consultant for its S/4HANA security model. Fully remote, long-term, and with real ownership over how access and authorizations are designed and governed.

The challenge

The SAP core keeps moving: migrations, upgrades and new implementations, and each of them needs the security layer resolved from day one rather than patched at the end. You take the authorization model, segregation of duties, GRC Access Control and the controls that keep audits clean. The work is cross-functional by nature, working side by side with functional and technical teams, so a key part of the role is ensuring the design survives contact with the actual implementation. There is also a build component beyond business as usual: contributing to the Security Operations Center so threats get detected and answered, not just logged.

Responsibilities

• Cover the security workstream in S/4HANA migrations, upgrades and greenfield implementations.
• Build and maintain the role and authorization model, segregation of duties included.
• Deploy security controls across S/4HANA and the systems connected to it.
• Set the corporate SAP security standard and keep it governed over time.
• Partner with functional and technical squads so controls are implemented as designed.
• Run internal and external audit cycles, remediation activities included.
• Roll out digital identity, access management and data protection capabilities.
• Contribute to building up the SOC for threat detection and response.

Requirements

• Hands-on track record in SAP S/4HANA Security.
• Strong command of the SAP authorization stack: PFCG, SU24, SUIM and Fiori authorizations.
• Practical experience with GRC Access Control across ARM, ARA, BRM and EAM.
• Working knowledge of Identity and Access Management.
• Exposure to cloud security in at least one hyperscaler (Azure, AWS or GCP).
• Familiarity with ISO 27001 and NIST as reference frameworks.

Nice to have

• SAP Cloud Identity Services.
• SAP BTP Security.

Why this project

• Long term, full time, with continuity beyond the first delivery.
• 100% remote, no relocation and no office days.
• Real ownership: you define the standard; you do not inherit it.
• Direct collaboration with the internal functional and technical teams.
• Scope that goes past role maintenance: GRC, IAM and SOC build-up.

SAPSecurity #S4HANA #SAPGRC #IAM #CyberSecurity #FreelanceIT #Shakers

• Hands-on track record in SAP S/4HANA Security.
• Strong command of the SAP authorization stack: PFCG, SU24, SUIM and Fiori authorizations.
• Practical experience with GRC Access Control across ARM, ARA, BRM and EAM.
• Working knowledge of Identity and Access Management.
• Exposure to cloud security in at least one hyperscaler (Azure, AWS or GCP).
• Familiarity with ISO 27001 and NIST as reference frameworks.

Nice to have

• SAP Cloud Identity Services.
• SAP BTP Security.

• Long term, full time, with continuity beyond the first delivery.
• 100% remote, no relocation and no office days.
• Real ownership: you define the standard; you do not inherit it.
• Direct collaboration with the internal functional and technical teams.
• Scope that goes past role maintenance: GRC, IAM and SOC build-up.

SAPSecurity #S4HANA #SAPGRC #IAM #CyberSecurity #FreelanceIT #Shakers

At Shakers we are working with a global technology firm to bring in an SAP Security Consultant for its S/4HANA security model. Fully remote, long-term, and with real ownership over how access and authorizations are designed and governed.