SAP Security Specialist

About the team –

The SAP Platform team is committed to providing a robust, secure, and highly available SAP ecosystem across Ford Motor Company. Our mission is to empower critical business operations with reliable, scalable, and innovative SAP foundational services.

The SAP Platform team delivers world-class services that our:

• Business Units leverage for secure, performant, and compliant enterprise solutions, including core operational needs in After Sales, Manufacturing, and Central Finance.
• Development Teams utilize for rapid innovation and strategic initiatives, supported by comprehensive SAP BTP development capabilities and architectural guidance.
• Ford Enterprise relies on for the foundational stability and governance of its corporate backbone, ensuring efficient and effective operations globally.

In this capacity, we provide essential SAP platform services, including SAP BASIS administration, comprehensive security management, expert architectural leadership, SAP BTP development support, and robust governance frameworks.

Job Description –

We are currently looking to expand our team with a highly skilled Senior SAP Security Specialist to support our ongoing initiatives and strategic security operations in SAP RISE and BTP area.

About the Role –

As a Senior SAP Security Specialist, you will be a key member of the Ford PS&L SAP Platform services, adding critical value to the entire organization by ensuring the robust security, governance, and compliance of our SAP ecosystem. You will play a vital role in protecting critical business operations, supporting secure processes, and contributing to the overall integrity of Ford's global supply chain and enterprise systems. This position requires deep expertise in Designing, implementing, and maintaining security and authorization concepts in our SAP S4 HANA environment, with a strong focus on SAP GRC and an understanding of modern security concepts including those within IAG and SAP Business Technology Platform (BTP).

Required Skills & Qualifications –

• A degree in Computer Science, Electrical & Electronics engineering or closely related discipline
• Minimum of 10 years of SAP Security experience with at least two full life cycle S/4 HANA implementations.
• Proficient with SAP security design, build, deployment, and audits for standard role-based Security.
• Experience in Security role setup with S/4 Core and/or S/4 EWM
• Experience in setting up and configuring SAP GRC modules (Access Control, Process Control)
• Experience with troubleshooting workflow issues in GRC User provisioning.
• Experience in SAP IAG.
• Experience with SAP Business Technology Platform (BTP) security concepts, services, and best practices.

Preferred Qualifications –

• At least a bachelor's degree in a relevant field.
• Experience with other security domains (e.g., identity and access management, data privacy, cyber security frameworks).
• Strong understanding of the overall SAP landscape and how the various modules interact with each other from a security perspective.
• Excellent analytical and problem-solving skills with a proactive approach to identifying and mitigating security risks.
• Ability to work collaboratively across various teams and stakeholders (e.g., audit, compliance, application teams).
• Proven ability to lead and mentor junior team members.
• Exceptional communication and interpersonal skills, capable of explaining complex security concepts to technical and non-technical audiences.
• Experience with security in cloud environments, particularly within SAP BTP and other technologies.
• Fluent in spoken and written English.
• Relevant SAP Security certifications (e.g., SAP Certified Application Associate - SAP GRC Access Control) – Nice to have.

Key Responsibilities –

• Implement/Support SAP GRC (Governance Risk & Compliance) Access Controls 12.0 including ARA, ARM, EAM and BRM & Process Control.
• Administration of SAP GRC configuration, rule sets, workflows and approvers for user provisioning, emergency access and access recertification.
• Configure BRF+ and workflow functionality
• Maintain GRC master data, running risk analysis, audit and compliance support activities
• Build and maintain MSMP Workflows and configuration of GRC notifications.
• Build ruleset, creating custom functions and risks and adjusting the existing rulesets according to the business needs.
• Perform user access reviews (UAR) by configuring necessary workflows and parameters
• Create Initiator, agent, routing and workflow related MSMP rules in Business rule framework
• Configure GRC master data, workflows, Dashboards and Access risk analysis reports.
• Design, implement and maintain role-based access control (RBAC) concepts in SAP S4 HANA, Fiori, BW/4HANA
• Develop and maintain authorization concepts aligned with business requirements and compliance standards
• Create and maintain custom roles and authorization objects
• Perform security audits and access reviews
• Troubleshoot authorization-related issues
• Provide documentation for authorization concepts and role designs
• Support SAP security implementations and upgrade projects
• Collaborate with business process owners for role design and access management
• Handle user access management and periodic access reviews
• Provide Production Support on a periodic 24x7 support with on-call responsibilities.