Senior SAP Security Expert / Security Architect – SAP RISE Greenfield – Freelance

Project overview

For an extensive SAP Greenfield transformation program, we are looking for a highly experienced SAP Security Expert / Security Architect.

As part of the project, a completely new SAP landscape will be built in an SAP RISE environment. Since no productive SAP landscape currently exists, the focus is on the end-to-end establishment of the SAP security organization, architecture, governance, and technical security processes.

We are not looking for a pure authorization consultant, but a senior expert who takes overarching responsibility for SAP Security and establishes the necessary structures from scratch.

Responsibilities

• End-to-end responsibility for SAP Application Security
• Establishment of a complete SAP Security Operating Model
• Definition of Security Governance, Standards, Processes, and Controls
• Development of a secure SAP RISE target architecture
• Definition and implementation of Secure-by-Design principles
• Establishment and further development of SAP IAM and authorization concepts
• Conception of role models, least privilege, and access governance
• Implementation of SoD, PAM, and EAM
• Integration of MFA, SSO, and Identity Federation
• Establishment of vulnerability and risk management processes
• Evaluation of SAP Security Notes and CVEs
• Management of vulnerability scans and remediation measures
• Definition and implementation of SAP hardening standards
• Securing RFCs, interfaces, communication channels, and technical users
• Establishment of audit logging and security monitoring
• Integration of SAP logs into SIEM / QRadar
• Implementation of threat detection and PAM processes
• Definition of virus scan policies for SAP interfaces
• Coordination of security responsibilities within the SAP RISE shared responsibility model
• Coordination with SAP RISE, system integrator, internal security teams, and other project streams
• Integration of SAP Security into enterprise-wide security governance
• Security support for releases, integrations, custom developments, and tests

Requirements

Project Environment

We are looking for a very senior SAP Security Expert who not only designs security but also operationally drives the establishment of the entire SAP security function and takes responsibility for its successful implementation.

• Several years of experience in SAP Security / SAP Authorization / SAP IAM
• Experience as SAP Security Architect, Security Lead, or comparable
• Very good knowledge of:
• SAP PFCG
• SU24
• SAP Authorization Concepts
• Role Design
• Segregation of Duties / SoD
• PAM / EAM
• Access Governance
• Experience with SAP GRC Access Control
• Knowledge of SAP Cloud Identity Services
• Experience with SSO, MFA, and Identity Federation
• Sound experience with SAP RISE and the shared responsibility model
• Experience with SAP Security Architecture in cloud/RISE environments
• Knowledge of SAP hardening and secure configuration
• Experience with RFC security, SNC, security audit logging, and technical users
• Experience in vulnerability management
• Knowledge of SAP Security Notes, CVEs, vulnerability scanning, and remediation
• Experience with SIEM and security monitoring integration
• Experience with Greenfield SAP transformations
• Demonstrable experience in establishing new security processes and governance structures
• Knowledge of security and compliance frameworks such as ISO 27001, NIST2, and CIS Controls
• Very good stakeholder and communication skills
• Experience in international / intercultural project environments
• Very good English skills
• German language skills are an advantage
• SAP Greenfield
• SAP RISE
• New SAP landscape without an existing productive SAP system
• Establishment of the SAP organization parallel to the transformation program
• Collaboration with an external system integrator
• High personal responsibility and scope for action
• Remote work with good coverage of the German time zone

Project details

• Start: ab sofort
• Duration: 6 Monate
• Remote: remote
• Location: Deutschland, Deutschland, DE
• Languages: German