SAP Security Specialist

At Centorrino Technologies (CT), we're more than just tech-we're a community that goes beyond expectations. We've been recognised as a Great Place to Work in and one of the Best Places to Work Medium & Large Size in Australia for 2025, with an outstanding eNPS score of 68. And we're not stopping there.

We are seeking an experienced SAP Security Specialist to play a key role in securing and governing a modern SAP landscape spanning S/4HANA, SAP BTP, Fiori, and cloud based platforms. Working across both project delivery and business as usual operations, you will be responsible for ensuring secure, compliant, and efficient access management while supporting major transformation initiatives, including the transition to SAP Identity Access Governance (IAG).

This role will be a 12 month fixed term contract based in Melbourne or Hobart.

What You'll Do

• Lead the design, implementation, and governance of SAP security across S/4HANA, SAP BTP, Fiori, and associated cloud platforms.
• Manage user access administration, provisioning, lifecycle management, and identity integration using SAP Cloud Identity Services (IAS/IPS).
• Design and maintain SAP roles and authorisations, ensuring secure and compliant access aligned with business requirements.
• Drive Segregation of Duties (SoD) governance, risk analysis, mitigation strategies, and audit remediation activities.
• Support incident and security management processes, investigating access related issues and implementing corrective actions.
• Provide security architecture guidance across SAP projects and enhancement programmes, embedding security by design principles.
• Lead and support the transition from legacy Identity Management solutions to SAP Identity Access Governance (IAG).
• Collaborate with business, Basis, architecture, and audit teams to deliver secure, scalable, and compliant SAP solutions.
• Ensure security controls and governance are maintained across hybrid SAP environments, including BTP, SAC, Datasphere, BW, and related platforms.

What You'll Bring

• Extensive experience in SAP Security and Authorisations, including role design, access management, and security architecture.
• Strong hands on expertise across SAP S/4HANA Security and SAP Fiori security components, including catalogues, groups, tiles, and OData services.
• Deep understanding of SAP Governance, Risk and Compliance (GRC), SAP Identity Access Governance (IAG), and Segregation of Duties frameworks.
• Proven experience with SAP Cloud Identity Services, including Identity Authentication Service (IAS), Identity Provisioning Service (IPS), SAML, SSO, federation, and enterprise identity integrations.
• Strong knowledge of SAP BTP security concepts, role collections, entitlements, authentication models, and principal propagation.
• Experience securing hybrid SAP landscapes, analytics platforms, and cloud based solutions while maintaining strong governance and compliance controls.
• Excellent stakeholder engagement and communication skills, with the ability to translate complex technical security concepts into business risk outcomes.
• Demonstrated ability to influence security architecture decisions and provide strategic security leadership across both project and BAU environments.
• Relevant SAP certifications and experience working within regulated or audit intensive environments will be highly regarded.

Benefits

• Hybrid working (for majority of roles) with team anchor days to support collaboration.
• Extensive training and development opportunities that enable continual growth as part of your career planning.
• Extensive discounts and benefits to maximise your money.
• A choice of your IT equipment to maximise your success and access to cost price tech for your personal needs.
• Fun team events to celebrate achievements and connect with colleagues outside work as part of an engaging culture.

CT celebrates diversity and enables every voice to be heard as we drive to create the world we want.

Note: A valid Vulnerable People / Working with Children Check (WWCC) and Police Check are required.