SAP Security Specialist

Hello, my name is Charles Quinones, Recruitment Consultant at FED IT, a recruitment firm specializing in permanent and contract placements within the Information Technology sector.
I am currently working with a leading organization in the retail industry looking for a SAP Security Specialist to play a key role in SAP security governance, access management, compliance initiatives, and large-scale transformation projects.

Reporting to the Corporate Controller, you will serve as the organization's subject matter expert for SAP Security and SAP GRC Access Management. You will be responsible for designing, implementing, and governing SAP security frameworks that support both business objectives and regulatory requirements.
Your responsibilities will include:


Defining and supporting the execution of the SAP security and access governance strategy;
Designing and maintaining enterprise-wide RBAC (Role-Based Access Control) models;
Governing Segregation of Duties (SoD) controls and sensitive access management processes;
Managing security rulesets, mitigating controls, and compliance frameworks;
Leading SAP security initiatives and roadmap execution;
Monitoring and executing key ITGC (IT General Controls) activities;
Supporting and administering SAP GRC Access Control modules, including:


Access Risk Analysis (ARA)
Access Request Management (ARM)
Emergency Access Management (EAM / Firefighter)




Conducting SoD risk assessments and security workshops;
Acting as the primary contact for internal and external audits;
Collaborating with SAP Basis, Development, Functional and Business teams to deliver scalable and secure access solutions;
Supporting strategic SAP initiatives such as SAP S/4HANA, EWM, and transformation programs;
Driving continuous improvements in access governance and role optimization processes.

Bachelor's degree in Information Technology, Computer Science, or a related discipline;
5+ years of experience in SAP Security and SAP GRC Access Management;
Hands-on experience implementing SAP security solutions in complex environments;
Strong expertise with SAP GRC Access Control, including ARA, ARM, and EAM;
Deep understanding of SoD risk management and critical access governance;
Proven experience designing and implementing enterprise RBAC frameworks;
Experience securing and supporting SAP S/4HANA environments;
Knowledge of SAP Fiori authorization concepts and security architecture;
Experience in audit, compliance, internal controls, or ITGC-focused environments;
Strong ability to translate business requirements into scalable, risk-based security solutions;
Excellent stakeholder management and communication skills;
Strong analytical thinking and problem-solving capabilities;
Ability to manage multiple priorities and initiatives simultaneously.


Why English Is Required
This role requires frequent interaction with SAP technical documentation, global best practices, software vendors, external partners, and stakeholders operating in English-speaking environments. Professional proficiency in English is therefore necessary to effectively perform the responsibilities associated with SAP security governance and compliance initiatives.


Working Conditions


Permanent full-time position;
Hybrid work environment;
Opportunity to work on major SAP transformation programs;
Strategic role with high visibility across IT, Finance and Audit teams;
Exposure to SAP S/4HANA, SAP GRC and enterprise security initiatives;
Competitive compensation package;
Comprehensive benefits program;
Strong opportunities for professional growth and career progression.