> Markdown version of [/jobs/ext/815455-business-application-security-specialist](https://www.wearedevelopers.com/jobs/ext/815455-business-application-security-specialist). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Business Application Security Specialist - **Company:** SICPA HOLDING SA - **Location:** Madrid, Spain - **Contract:** Permanent contract - **Skills:** User Authentication, Business Software, Capability Maturity Model Integration, Identity and Access Management, SAP (Applications), SAP Business Suiteing, SAP Project System, SAP Security, SAP S/4HANA - **Published:** June 14, 2026 - **Apply:** https://es.indeed.com/viewjob?jk=b61b886c91868d51 ## About the Role Do you have experience in SSO?, We are currently looking for our offices in Madrid (Spain) a very experienced, top motivated, hands-on, * At least 7 years of experience in SAP Security including Designing, Deploying, Maintaining and Supporting user and access management across different SAP Systems (SAP Security & Authorizations (ECC / S/4HANA). * Experience & expertise on the area Audit, GRC, SOD * Strong knowledge in SAP IAS / IPS (cloud identity services) * Proven knowledge in managing third-party service delivery * Strong communication skills, able to understand problems and present solutions towards business partners. * Strong analytical and problem-solving skills * Ability to work with business and technical stakeholders * Fluent in English and French a plus. ## Description The SAP Security & IAM / SAP IAS Specialist is responsible for designing, implementing, and maintaining secure identity and access management processes across SAP landscapes (on-premise and cloud), including SAP Identity Authentication Service (IAS). The role ensures compliance with internal policies, audit requirements, and regulatory standards while supporting business efficiency and security., SAP Security Governance * Define and maintain SAP security policies, standards, and procedures * Ensure Segregation of Duties (SoD) compliance and perform regular risk analysis * Manage SAP security lifecycle: role design, testing, approval, deployment * Support internal and external audits (e.g., Deloitte, CMMI) with required evidence * Maintain documentation (security policies, SOPs, access control procedures) User & Access Management * Oversee end-to-end SAP user lifecycle * Ensure access requests are controlled, approved, and tracked * Conduct periodic user access reviews and certifications * Optimize role assignments to reduce risk and license cost exposure (e.g., avoid unused access) * Analyze and remediate role conflicts and excessive privileges * Support business teams in defining appropriate access * Support business teams in defining appropriate access SAP IAS / Identity Services (Cloud IAM) * Administer SAP Identity Authentication Service (IAS) and integration with SAP cloud platforms * Manage authentication mechanisms (SSO, MFA, identity federation) * Ensure IAS is aligned as a central authentication service for SAP eco-systems * Support onboarding of applications into IAS and identity providers * Manage migration to SAP Business roles Security Monitoring & Risk Management * Monitor SAP systems for unauthorized access attempts, privileged activity * Investigate incidents and coordinate remediation actions * Maintain security baseline and compliance controls ## Related Videos - [Open Source: The Engine of Innovation in the Digital Age](https://www.wearedevelopers.com/videos/1103-open-source-the-engine-of-innovation-in-the-digital-age) - [AI Pair Programming with GitHub Copilot at SAP: Looking Back, Looking Forward!](https://www.wearedevelopers.com/videos/1546-ai-pair-programming-with-github-copilot-at-sap-looking-back-looking-forward) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Beyond GPT: Building Unified GenAI Platforms for the Enterprise of Tomorrow](https://www.wearedevelopers.com/videos/1525-beyond-gpt-building-unified-genai-platforms-for-the-enterprise-of-tomorrow) - [How One Developer Built the Back Office for 10 Million Companies](https://www.wearedevelopers.com/videos/100082-how-one-developer-built-the-back-office-for-10-million-companies) - [The Future of Open Source](https://www.wearedevelopers.com/videos/1124-the-future-of-open-source) ## Related Articles - [Spanish Business Culture and Etiquette](https://www.wearedevelopers.com/magazine/353-spanish-business-culture-and-etiquette) - [Welcome to Switzerland](https://www.wearedevelopers.com/magazine/4-welcome-to-switzerland) - [Best Companies to Work For in Berlin: Top 14 Companies in 2023 ](https://www.wearedevelopers.com/magazine/188-best-companies-to-work-for-in-berlin-top-14-companies-in-2023) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Where To Find Software Engineering Jobs](https://www.wearedevelopers.com/magazine/396-where-to-find-software-engineering-jobs) - [Swiss Business Culture and Etiquette](https://www.wearedevelopers.com/magazine/323-swiss-business-culture-and-etiquette)