SAP GRC Security Architect

SAP Security Solution Architect

Key roles and responsibilities

•      Assess the role design against BPDs and Signavio process flows across all five workstreams, including the global template (master and derived roles, org-level values) for EMEA, North America and APAC.

•      Define the Pillar A review approach, checklists and severity criteria, and direct the offshore build review of S/4, Fiori, BTP and GRC Access Control.

•      Author the Pillar A assessment report, with findings and recommendations aligned to SAP recommendations and market best practices.

Skills

•      S/4HANA authorization concept: single, composite, master and derived roles, org-level fields

•      Fiori security: catalogs, spaces and pages, apps and OData services

•      SAP GRC Access Control (ARA, ARM, EAM) design principles

•      Critical and sensitive access, IT functional and technical roles

•      Clear technical writing for executive and technical audiences

Minimum experience

10+ years in SAP security, including at least two full-cycle S/4HANA implementations as security lead or architect, and at least one global template rollout across multiple regions. Fashion or retail SAP experience preferred. SAP security or GRC certification preferred.

Key result areas (KRAs)

•      Role design assessment: Clear view of whether role design matches the documented business processes

•      Global template assessment: Confirmed fitness of the template for EMEA, North America and APAC rollouts

•      Review method and oversight: Consistent, peer-reviewed output from the offshore build review

•      Pillar A report: Complete, prioritized report ready for the final readout