SAP Cloud ERP Security

Role: SAP Cloud ERP Security & IAM Lead

Location: Chicago, IL Remote (Only EST and CST time zone)

Duration: 12 Months

Role Summary

Lead SAP S/4HANA Cloud Public Edition security, identity, authorization, and access governance in a post-go-live environment.

Key Responsibilities

• Design and govern business roles, catalogs, IAM apps, and authorization restrictions.
• Manage user lifecycle, role assignments, least-privilege access, and segregation of duties (SoD).
• Govern SAP Cloud Identity Services, including Identity Authentication and Identity Provisioning.
• Lead access reviews, risk remediation, privileged access governance, and audit readiness.
• Troubleshoot production access issues and manage security incidents.
• Assess SAP releases, validate authorization changes, and ensure security regression testing.
• Coordinate with Corporate IAM, HR, Audit, Compliance, SAP functional teams, and BTP teams.
• Improve access automation, monitoring, role simplification, and operational efficiency.

Required Qualifications

• Bachelor’s degree or equivalent professional experience.
• 8+ years of SAP Security, Authorization, or IAM experience.
• Hands-on SAP S/4HANA security experience, preferably Public Cloud Edition.
• Strong knowledge of business-role design, organizational restrictions, SoD, and user lifecycle management.
• Experience with SAP Cloud Identity Services, SSO, provisioning, audits, and production support.

Preferred Skills

• SAP Cloud Identity Access Governance or enterprise IGA/GRC tools.
• Microsoft Entra ID, SAP BTP, Ariba, and Fieldglass access governance.
• Knowledge of SOX, ITGC, ISO 27001, NIST, and ITIL.