Sr. Expert SAP Security

Your tasks

• Define, maintain, and continuously improve SAP security, authorization, and access governance concepts across the SAP landscape of the Borealis Group/Borouge International.
• Design and govern SAP roles, profiles, authorization objects, organizational restrictions, and user access models.
• Ensure SAP role design adheres to least-privilege, need-to-know, and segregation of duties principles.
• Own SAP user access management processes, including provisioning, de-provisioning, privileged access, emergency access, and periodic access reviews.
• Act as the SAP Security and SAP GRC subject matter expert for business, project, compliance, and audit stakeholders.
• Manage and continuously improve SAP Governance, Risk and Compliance (GRC) processes and capabilities.
• Configure and maintain SAP GRC Access Control functionalities, including Access Risk Analysis, Access Request Management, Emergency Access Management (Firefighter), Business Role Management, and User Access Reviews.
• Define and maintain SAP GRC rule sets, risk definitions, workflow configurations, and mitigation controls in collaboration with business representatives and control owners.
• Monitor, assess, and remediate segregation of duties conflicts, critical access risks, privileged access risks, and security exceptions.
• Ensure compliance with internal controls, audit requirements, regulatory obligations, and access governance standards.

Your skills

• University degree Master in IT, Computer Science, Business Administration, Engineering, Finance, or a related discipline.
• Relevant professional experience: >7 years
• Advanced expertise in SAP Security, SAP Authorizations, SAP GRC, Access Governance, and related Identity and Access Management disciplines.
• Advanced knowledge of SAP authorization concepts, including Roles and Profiles, Authorization Objects, Organizational Restrictions, Composite and Derived Roles, and tools such as SU24, PFCG, SU53, ST01, and STAUTHTRACE.
• Experience with SAP S/4HANA, SAP Fiori Security, and SAP security requirements across major SAP modules, preferably including FI/CO, MM, SD, PP, PM, QM, and WM/EWM.
• Experience with user lifecycle management, privileged access management, emergency access, and access recertification processes.
• Advanced knowledge of SAP GRC is mandatory.
• Hands-on experience with SAP GRC Access Control, including Access Risk Analysis, Access Request Management, Emergency Access Management (Firefighter), Business Role Management, and User Access Reviews.
• Experience maintaining SAP GRC rule sets, workflows, risk libraries, mitigation controls, and segregation of duties frameworks.
• Ability to translate audit and control requirements into practical SAP Security and SAP GRC processes.
• Familiarity with IT General Controls, change management, access management processes, and control documentation.
• Advanced ability to advise business, project, audit, and compliance stakeholders on SAP Security, Access Governance, risk, and control-related topics.
• Proven experience working in industrial, manufacturing, or other regulated and audit-driven environments; experience in the chemical industry is an advantage.
• Knowledge of Identity and Access Management solutions integrated with SAP, including Microsoft Entra ID, ServiceNow, and third-party Identity Management platforms.
• SAP certifications in Security, Authorizations, SAP GRC, and/or SAP S/4HANA are considered an advantage.
• Fluent English skills (spoken and written).