Start Date: ASAP
End Date: 31/12/2026
Location: 100% Remote
Time Zone: EMEA working hours
Language: English

The consultant will support the analysis, design, implementation, and optimization of SAP security concepts, including security hardening, SAP Security Notes implementation strategies, role and authorization models, and compliance-related controls.

The focus will be on risk mitigation, audit readiness, sustainable security governance, and improving the overall security posture of SAP environments.

The services will be delivered on a project-based and outcome-oriented basis, without integration into the client’s operational support organization.
 

Scope:

SAP Security Architecture & Role Design

• Analyze and evaluate SAP security architectures and authorization concepts.
• Design, develop, and optimize SAP role concepts, including single roles and composite roles.
• Assess security requirements and ensure alignment with business processes.
• Define and improve authorization models to support secure business operations.

SAP Security Notes & Patch Strategy

• Analyze SAP Security Notes and assess applicability, risks, and potential impact.
• Develop implementation and validation approaches for SAP Security Notes and security patches across ABAP and Java-based SAP landscapes.
• Document technical prerequisites, dependencies, risks, and implementation recommendations.

SAP GRC & Compliance

• Analyze Segregation of Duties (SoD) risks and access control concepts.
• Define remediation strategies and risk mitigation recommendations.
• Assess compliance requirements and support audit readiness activities.
• Review and improve SAP GRC-related controls.

Security Assessments & Root Cause Analysis

• Perform security assessments and root cause analyses for identified security issues.
• Investigate authorization and access-related findings.
• Develop sustainable improvement concepts and preventive measures.

User & Access Management Concepts

• Design user and access management approaches for new applications and business requirements.
• Evaluate security concepts for custom transactions, programs, and tables.
• Provide recommendations for secure access management practices.

Documentation & Knowledge Transfer

• Create documentation of security concepts, assessments, findings, and recommendations.
• Prepare and present assessment results and implementation approaches.
• Provide knowledge transfer to relevant stakeholders.

Expected Deliverables

• SAP Security and GRC assessment reports.
• SAP role and authorization design concepts.
• SAP Security Note impact assessments and implementation recommendations.
• SoD risk analyses and remediation recommendations.
• User and access management concepts.
• SAP security architecture documentation.
• Audit-related security recommendations.

Skills:

• Strong experience as an SAP Security / SAP GRC Consultant.
• Hands-on experience with SAP authorization concepts and role design.
• Strong knowledge of SAP GRC Access Control and compliance processes.
• Experience with SoD analysis, risk remediation, and audit requirements.
• Experience analyzing SAP Security Notes and supporting security hardening activities.
• Knowledge of SAP ABAP and Java-based SAP landscapes.
• Experience with SAP security assessments and root cause analysis.
• Strong documentation and communication skills.
• Ability to work independently in a consulting environment.
• Fluent English communication skills.
• Availability during EMEA working hours.

SNI sp. z o.o. will process personal data for the purpose of the recruitment process in accordance with Data Privacy Policy. The data may also be stored and processed for future recruitment purposes, in accordance with the given consent.