SAP BW & Datasphere Security and Authorizations Expert

Square One Resources is looking for an experienced SAP BW & Datasphere Security and Authorizations Expert to join an international project in a highly regulated environment. The role focuses on designing, implementing, and supporting SAP security and authorization frameworks across complex SAP landscapes including SAP BW 7.5, BW/4HANA, SAP Datasphere, and SAP data platforms.

• Minimum 5+ years of hands-on experience in SAP Security and Authorizations.
• Strong experience in designing and implementing SAP authorization and role concepts.
• Hands-on experience with SAP BW 7.5, SAP BW/4HANA, SAP Datasphere, SAP ERP/ECC and/or S/4HANA, SAP HANA DB, and HANA Studio.
• Strong knowledge of PFCG role maintenance and authorization concepts.
• Proven experience in SAP authorization troubleshooting and authorization trace analysis.
• Experience providing L3 Production Support in complex SAP environments.
• Strong working knowledge of SAP GRC Access Control.
• Experience with Segregation of Duties (SoD), Critical Action monitoring, Mitigation Controls, and Emergency Access Management.
• Experience working in regulated environments and with compliance requirements such as ICFR and GxP.
• Experience supporting SAP security audits, IT validation, and remediation activities.
• Knowledge of data privacy and security controls, including GDPR and row-level/column-level access controls.
• Experience designing security models for SAP analytics and data platforms is highly preferred.
• Bachelor's degree in IT, Computer Science, or a related field is preferred.
• Strong communication and stakeholder management skills.
• Ability to work independently in an international and complex project environment.

Nice to have:

• Experience with security architecture for SAP data products.
• Experience working in pharmaceutical, financial, or other highly regulated industries.
• Experience with SAP security transformation or migration projects.
• Knowledge of modern SAP cloud security concepts.
• Experience working with internal and external auditors.

• Design and implement scalable, job-based SAP role and authorization frameworks.
• Develop and maintain security models across SAP ERP/ECC, S/4HANA, SAP BW 7.5, BW/4HANA, HANA DB, and SAP Datasphere.
• Design security and authorization concepts for SAP data products and analytics environments.
• Provide L3 production support for complex access and authorization-related issues.
• Perform authorization troubleshooting and trace analysis.
• Manage user provisioning, role assignments, and emergency access requests.
• Maintain and optimize PFCG roles and authorization concepts.
• Configure and support SAP GRC Access Control processes.
• Define and enforce Segregation of Duties (SoD) rules, critical actions, and mitigation controls.
• Support SAP security patches, upgrades, and remediation activities.
• Ensure compliance with ICFR, GxP, GDPR, and other applicable security and regulatory requirements.
• Support internal and external SAP security audits and manage remediation of security findings.
• Implement data privacy and access controls, including row-level and column-level security.
• Collaborate with IT, business, security, compliance, and audit teams to ensure secure and compliant access to SAP systems and data.