Architect – SAP Security & Authorizations

Overview

This role support in the execution of day-to-day activities for SAP Security deliverables. This role requires close collaboration with DevSecOps to determine priorities of work intake from the project team to ensure that requirements are reviewed and solutions developed and implemented according to the project timelines.  The role will also closely work with the PMO, functional, technical and control teams to provide training on security work intake processes and provide periodic updates on activities.

• Expert knowledge of SAP Security and Authorizations – User & Role management
• Proven knowledge of Control and Compliance requirements and regulatory frameworks – audit cycles, Segregation of Duty and Risk Remediation
• Ability to collaborate with SAP Functional and SAP Technical teams to design and implement technical SAP security solutions
• Experience managing relationships with third-party vendors
• Knowledge of key business processes and the underpinning approval functionality
• Knowledge of SAP modules - FI, CO, IM, FSCM, PP, MM, SD, SRM,
• Experience of implementing SAP solutions and enhancing SAP systems
• Excellent communication skills at all levels of the organisation, including experience of communicating technical information to a non-technical audience
• Proficient in Analysis Authorizations (RSECADMIN), restricting Characteristic/Attribute values, and managing Authorization-Relevant InfoObjects.
• Extensive experience with PFCG (Single, Composite, Derived roles), SU24 maintenance, and Organizational Level values.
• Securing InfoAreas, InfoCubes, InfoObjects, PSA, and Queries.
• Trace,logs and workload monitoring from ECC, BW,S/4 and HANA DB Systems.

Responsibilities

Deliver Growth

•            Implements SAP security strategic plan and engineer solutions in line with those priorities as per Pepsico standards and Policies.

•            Collaborates with consulting teams on security solution executions

Create Efficiency

•            Reviews and resolves project/operation requirements within SLA

•            Reinforce correct SAP security procedures with DevSecOps teams and third party provider teams

•            Develops test cases, performs unit testing, and resolves issues

•            Ensures compliance with key controls

•            Participates in security reviews

Drive Future Success

•            Ensures SOX controls compliance by executing SAP security sector procedures

•            Maintains documentation of changes (users, roles, modifications) for audit purposes

•            Delivers SAP security audit reports

•            Creates and delivers training to users, support desk, security support analyst and administrators

•            Reviews OSS Notes, security patches; implements and tests those patches

Qualifications

Minimum 9+ years in SAP Security including ECC, S4 HANA, FIORI, MDG, BW, PO(Process Orchestration) and CRM with a deep understanding of the SAP’s authorization concepts as well as design and implementation methodology.

Required:

• • 8+ years of experience in developing solutions for securing custom transactions, tables, and programs 
  • 2+ years of experience in designing, building, testing, and deploying business and support roles with ECC, S/4 , BW and Fiori roles.
  • 1+ year of experience in large and complex projects with multiple rollouts for countries / regions
  • 1+  year of experience in designing, building and deploying HANA database security
  • Good to have security knowledge on PO and MDG authorization.