Our client operates a complex SAP system landscape spanning both on-premise and public cloud solutions (SAP ECC, SAP S/4 Public Cloud, SAP BW/4HANA, SAC, IBP, Ariba). As part of ongoing projects and daily operations, they are looking for an experienced SAP Security & Authorization Consultant to act as system owner for SAP GRC and take responsibility for security and authorization processes across all relevant SAP systems. The position is internationally oriented, with work locations in Zurich (CH) and Katowice (PL), and predominantly remote.
Responsible for all SAP on-premise and public cloud-based systems in terms of authorization and security management (SAP ECC, SAP S/4 Public Cloud, SAP BW/4HANA, SAC, IBP, Ariba)
IT system owner for the SAP GRC system(s) and the implemented processes for access management and FireFighter processes
Manage and maintain system security, including user roles, authorizations, and password policies, while ensuring segregation of duties (SoD) compliance for all relevant SAP systems
Design, implement and secure SAP roles and authorization models tailored to business needs
Ensure SAP systems meet standards such as SOX, GDPR, and ISO27K, and collaborate with auditors for documentation and compliance reviews (access and role reviews)
Serve as the main contact for SAP-related security incidents, efficiently resolving them, and conducting thorough investigations with proper documentation and follow-up actions
Support 1st level support for day-to-day operations in the user access management process, providing guidance on best-practice use of GRC processes
Work on SAP projects representing the security stream (SAP rollouts & large company projects)
Create and maintain SOPs for all relevant SAP systems
Contribute to the internal IT control framework by providing the required data for testing ITGC in the SAP security and authorization area
Provide training to global and local business users on SAP GRC processes
Requirements Personality
Functional security and authorization consultant with hands‑on system experience
Understands the business context of the position and proactively works with different business counterparts
Open personality who enjoys working in an international and distributed team setup
Service‑ and solution‑oriented, eager to learn new topics
Works independently within the team and is willing to go the extra mile when required
Good communication and organizational skills
Excellent command of spoken and written English (German is a plus)
Willing to handle projects and support activities in parallel
Experience with problem‑solving situations, including approaches, tools, and tactics used to manage effective outcomes
Professional Competence
Minimum 5–10 years' experience as a functional SAP security and authorization consultant
Strong knowledge of SAP system architecture, including SAP Basis/BTP, SAP S/4HANA, SAP ECC
Strong experience working with SAP GRC/IAG systems
Strong experience managing users, roles in SAP ECC and S/4, profiles, and security in SAP
Familiarity with regulatory frameworks such as SOX, ISO27K, or similar compliance standards
Experience with SAP system audits and security assessments
Good understanding of end‑to‑end SAP processes such as procure‑to‑pay or order‑to‑cash
#J-18808-Ljbffr
Responsible for all SAP on-premise and public cloud-based systems in terms of authorization and security management (SAP ECC, SAP S/4 Public Cloud, SAP BW/4HANA, SAC, IBP, Ariba)
IT system owner for the SAP GRC system(s) and the implemented processes for access management and FireFighter processes
Manage and maintain system security, including user roles, authorizations, and password policies, while ensuring segregation of duties (SoD) compliance for all relevant SAP systems
Design, implement and secure SAP roles and authorization models tailored to business needs
Ensure SAP systems meet standards such as SOX, GDPR, and ISO27K, and collaborate with auditors for documentation and compliance reviews (access and role reviews)
Serve as the main contact for SAP-related security incidents, efficiently resolving them, and conducting thorough investigations with proper documentation and follow-up actions
Support 1st level support for day-to-day operations in the user access management process, providing guidance on best-practice use of GRC processes
Work on SAP projects representing the security stream (SAP rollouts & large company projects)
Create and maintain SOPs for all relevant SAP systems
Contribute to the internal IT control framework by providing the required data for testing ITGC in the SAP security and authorization area
Provide training to global and local business users on SAP GRC processes
Requirements Personality
Functional security and authorization consultant with hands‑on system experience
Understands the business context of the position and proactively works with different business counterparts
Open personality who enjoys working in an international and distributed team setup
Service‑ and solution‑oriented, eager to learn new topics
Works independently within the team and is willing to go the extra mile when required
Good communication and organizational skills
Excellent command of spoken and written English (German is a plus)
Willing to handle projects and support activities in parallel
Experience with problem‑solving situations, including approaches, tools, and tactics used to manage effective outcomes
Professional Competence
Minimum 5–10 years' experience as a functional SAP security and authorization consultant
Strong knowledge of SAP system architecture, including SAP Basis/BTP, SAP S/4HANA, SAP ECC
Strong experience working with SAP GRC/IAG systems
Strong experience managing users, roles in SAP ECC and S/4, profiles, and security in SAP
Familiarity with regulatory frameworks such as SOX, ISO27K, or similar compliance standards
Experience with SAP system audits and security assessments
Good understanding of end‑to‑end SAP processes such as procure‑to‑pay or order‑to‑cash
#J-18808-Ljbffr
SAP Security & Authorization Consultant Arbeitgeber: Swisslinx AG
Swisslinx AG bietet eine dynamische und innovative Arbeitsumgebung im Herzen von Zürich, wo Mitarbeiter die Möglichkeit haben, an spannenden Projekten im Finanzsektor zu arbeiten. Mit einem starken Fokus auf persönliche und berufliche Weiterentwicklung sowie einer offenen Unternehmenskultur fördert das Unternehmen Teamarbeit und Kreativität. Die attraktiven Benefits und die zentrale Lage machen Swisslinx zu einem hervorragenden Arbeitgeber für talentierte Entwickler, die nach einer sinnvollen und erfüllenden Karriere suchen.
