SAP Security Lead Consultant(101833-1)

Location: Montvale, NJ or Chicago, IL (100% Onsite)

SAP Security Lead Consultant

1. Strong hands-on experience with SAP S/4HANA Cloud, public edition security: Business Roles, Business Catalogs, Restriction Types, Spaces & Pages, and App assignments.
2. Map business processes to business catalogs and restriction types; define data access restrictions.
3. Implement and manage SAP Cloud Identity Services, including IAS for SSO, MFA, conditional access, and IPS for provisioning to S/4HANA Cloud and other SAP cloud applications.
4. Design and execute Segregation of Duties (SoD) risk management using SAP IAG or equivalent third-party tools; manage access requests, risk analysis, mitigation, and recertification processes.
5. Apply SAP BTP security concepts: subaccounts, role collections, service instances, and cross-solution identity patterns.
6. Prepare audit evidence and operate controls for regulated environments such as SOX and GDPR.
7. Provide strong stakeholder management, lead workshops, and produce clear documentation.
8. Use ABAP/Fiori knowledge for security troubleshooting, including authorization checks and SU53/trace analogs in a cloud context.
9. Utilize Cloud ALM for monitoring and transport strategies in the public cloud.
10. Understand Central Business Configuration (CBC) phases and their related security touchpoints. Required experience: 10+ years in SAP Security & Authorization.