Lead SAP Security Specialist

Company Description

Sutherland is a global leader in driving business and digital transformation, and exceptional experiences along the entire journey of our client’s engagement with their customers. With over 35 years of experience, we combine deep domain expertise and extensive knowledge in proven optimization with both proprietary and partnered tools and platforms to drive growth, efficiency, and productivity across organizations.

Sutherland brings together our people, processes, products and platforms across cognitive artificial intelligence (AI), intelligent automation, advanced analytics and digital services to create unique solutions for the industries that we service. The core values of remaining agile, outside-the-box thinking, uncompromising integrity and flawless execution are key pillars of the company.

We serve marque brands across Healthcare, Insurance, Banking and Financial Services, Communications, Media and Entertainment, Technology, Travel and Logistics and Retail. Sutherland has 212 unique and independent inventions associated with several patent grants in critical technologies in the US and UK.

Job Description

We are seeking a highly skilled and experienced SAP Security Specialist to join our SAP Implementation team. The ideal candidate will have 6 to 9 years of experience in SAP security, including hands-on involvement in SAP implementations and security configurations across SAP landscapes. The candidate will be responsible for designing, implementing, and supporting SAP security solutions, focusing on securing SAP applications, authorizations, roles, and data access control. This role will require strong technical and functional expertise in SAP Security, Risk Management, and compliance standards.

Key Responsibilities:

• SAP Security Design & Implementation:
• Implement and manage SAP security roles, profiles, and authorizations within SAP S/4HANA, SAP ECC, BTP, SAP Fiori, and other SAP applications.
• Design and configure security models for various SAP modules, ensuring secure access to sensitive business processes and data.
• Manage role design, segregation of duties (SoD) analysis, and user provisioning in SAP environments.
• Work on securing interfaces, data transfers, and other integration points in SAP landscapes.
• User & Role Management:
• Perform user access management activities, including creating, modifying, and deactivating user accounts and roles.
• Implement role-based access control (RBAC) to ensure that users have the right level of access based on their job responsibilities.
• Conduct regular reviews of roles, user access, and security settings to maintain compliance and minimize security risks.
• Compliance & Risk Management:
• Ensure SAP systems comply with internal and external security policies, regulations, and standards (e.G., SOX, GDPR, etc.).
• Work closely with auditors and compliance teams to address security gaps, review audit logs, and ensure adherence to security policies.
• Perform periodic SAP security assessments, including vulnerability assessments and remediation actions, to mitigate potential risks.
• SAP GRC & Authorization Management:
• Configure and maintain SAP Governance, Risk, and Compliance (GRC) tools to manage security roles, risk management, and audit compliance.
• Implement SAP GRC Access Control for user access management, role design, and SoD conflict remediation.
• Utilize SAP GRC for risk assessment and ensure the system provides transparent security processes.
• Security Incident Management & Troubleshooting:
• Investigate and resolve security incidents or violations, ensuring proper remediation and preventive actions.
• Provide security support for SAP systems, investigating access issues, troubleshooting authorization errors, and ensuring proper resolution.
• Collaboration & Stakeholder Communication:
• Collaborate with functional and technical teams to understand security requirements and ensure that security measures align with business needs.
• Provide guidance and support to SAP functional teams on security aspects of SAP modules and integration points.
• Communicate effectively with business and IT teams regarding security concerns, risks, and mitigation strategies.
• Documentation & Reporting:
• Document security configurations, processes, and controls for audit and compliance purposes.
• Provide regular reports on security activities, user access reviews, risk assessments, and compliance status.
• Ensure the accuracy and completeness of all security-related documentation, including policies, procedures, and guidelines.

Key Skills & Qualifications:

• SAP Security Expertise:
• Strong hands-on experience in SAP security administration, including role design, user administration, and authorization management within SAP S/4HANA, SAP ECC, SAP Fiori, and other SAP applications.
• Proficient in SAP GRC Access Control, SAP Security Audit Log, and SAP Identity Management.
• Deep understanding of SAP authorization concepts, user roles, profile management, and securing critical SAP modules.
• Compliance & Risk Management:
• Knowledge of compliance regulations and industry standards (e.G., SOX, GDPR, HIPAA) and their application within SAP environments.
• Familiarity with Segregation of Duties (SoD) analysis and conflict management, ensuring compliance with internal controls and security policies.
• Experience & Project Delivery:
• 12+ years of experience in SAP security and implementations, with a focus on SAP security architecture and role management.
• Proven experience in managing security during SAP system implementations, upgrades, and migrations.
• Technical Skills:
• Experience with SAP security tools such as SAP GRC, SAP IDM, and SAP Security Audit Log.
• Familiarity with SAP NetWeaver, SAP HANA, SAP S/4HANA, SAP Fiori, and other SAP solutions.