SAP Secruity Expert

Project overview

I am currently looking for an experienced SAP Security Expert to support a greenfield SAP transformation project within an SAP RISE environment.

Initial Situation

• Greenfield implementation of a complete SAP landscape
• The customer currently does not operate any productive SAP system
• The future SAP organization is being built in parallel with the transformation program
• The first major ERP go-live is planned for March next year
• The future SAP landscape will be operated within an SAP RISE environment
• A system integrator is responsible for delivering the SAP solution
• SAP Security must be designed, implemented, and integrated into the overall enterprise security strategy from scratch
• Strong focus on governance, security architecture, processes, and secure-by-design principles

Responsibilities

Must-have Skills

• Establish and implement the SAP Security Operating Model
• Define security governance, standards, processes, and responsibilities
• Design the target-state SAP security architecture within the SAP RISE model
• Implement secure-by-design principles across SAP systems and integrations
• Build and establish SAP Identity & Access Management (IAM)
• Define authorization and role concepts
• Implement Segregation of Duties (SoD), Privileged Access Management (PAM), and Emergency Access Management (EAM)
• Introduce Single Sign-On (SSO) and Multi-Factor Authentication (MFA)
• Establish SAP vulnerability management processes
• Evaluate and implement SAP Security Notes
• Perform risk assessments and track remediation activities
• Define and maintain SAP hardening standards
• Secure interfaces, RFC communication, and technical users
• Integrate SAP systems into existing monitoring and SIEM platforms
• Connect SAP log systems to QRadar
• Implement audit logging and security monitoring capabilities
• Define antivirus and security policies for all interfaces
• Govern SAP security activities within the SAP RISE shared-responsibility model
• Coordinate with SAP regarding security evidence, compliance requirements, and security controls
• Ensure audit readiness and compliance across the future SAP landscape
• Several years of experience in SAP Security & Authorizations
• Strong expertise in SAP authorization concepts (PFCG, SU24)
• Proven experience with SoD, PAM, and EAM
• Hands-on experience with SAP GRC Access Control
• Extensive knowledge of SAP IAM concepts and solutions
• Experience with SAP Cloud Identity Services, SSO, and MFA
• Strong understanding of SAP RISE Security and shared-responsibility models
• Experience designing SAP security architectures in cloud environments
• Expertise in SAP hardening and secure configuration
• Experience with vulnerability management, SAP Security Notes, and CVE assessments
• Knowledge of security monitoring and SIEM integration
• Experience with compliance frameworks such as ISO 27001, NIS2, and CIS Controls
• Proven track record in greenfield SAP transformations and large-scale programs
• Ability to establish security governance frameworks, processes, and operating procedures from scratch

Nice to have

• Experience with QRadar
• Previous experience in SAP RISE greenfield implementations
• Knowledge of penetration testing and threat detection
• German language skills
• Experience working in international and fully remote project environments

Project details

If you are interested, or if you can recommend a suitable consultant, I would appreciate receiving an

up-to-date profile (Word format), including availability and daily rate.

SThree_Germany is acting as an Employment Business in relation to this vacancy.

• Start: ASAP
• Duration: Until 30 April 2027
• Workload: 140 project days
• Location: 100% Remote
• Start: 2026-11
• Remote: remote
• Location: Germany, Deutschland, DE
• Languages: German