We are seeking a SAP S/4 Security & Compliance Technical Resource to architect and govern SAP security design, access controls, and compliance frameworks across a highly regulated, multi-entity environment.

This role will ensure secure, scalable, and audit-compliant access management aligned with enterprise cybersecurity and regulatory standards.

This is a senior technical governance role combining SAP security architecture expertise with regulatory compliance leadership
Basic Qualifications Bachelor’s Degree in Information Systems, Cybersecurity, Computer Science, or related field.8–12+ years SAP Security experience.2+ full lifecycle SAP implementations (minimum 1 S/4HANA).Experience operating in a regulated or SOX-controlled environment.

Required Expertise Deep SAP S/4 security configuration experience.

Strong expertise in:Role design & authorization objects User profile administration Segregation of Duties analysisSAP GRC Access Control Hands-on SSO configuration and IAM integration experience.

Strong understanding of access control governance frameworks.

Experience in audit remediation and compliance reporting.

Preferred Qualifications Aerospace & Defense or highly regulated industry experience.

Experience in global template harmonization or carve-out programs.

Familiarity with SAP BTP security models.

Exposure to cloud identity integration strategies.

Leadership Competencies Governance-oriented and detail-driven.

Strong collaboration across Cybersecurity, Compliance, and IT teams.

Executive-level communication and stakeholder engagement capability.

Ability to balance security rigor with operational enablement.      #AERO26
Key Responsibilities Security Architecture & Best Practices Design and govern SAP S/4 security architecture aligned to clean-core and least-privilege principles.

Establish global security standards, naming conventions, and role design methodologies.

Drive standardization of role templates across global deployments.

Participate in design authority reviews to ensure security-by-design principles.

User Profiles & Role Design Design and maintain SAP S/4:Role-based access controls (RBAC)Composite and single roles Derived roles Organizational-level restrictions Align roles to enterprise structure (company codes, plants, sales orgs).Ensure segregation of duties (SoD) compliance.

Support mass user provisioning and lifecycle management.

Single Sign-On (SSO) & Identity Integration Design and support SSO integration using:SAMLAzure AD / enterprise IAM platformsSAP Identity Authentication Service (IAS)Integrate SAP S/4 with enterprise identity and access management (IAM) tools.

Enable secure authentication across hybrid and cloud landscapes.

Support multi-factor authentication (MFA) strategies where applicable.

Access Controls & Compliance Implement and govern:Segregation of Duties (SoD) frameworksGRC Access Control integration Firefighter / emergency access procedures User access reviews and certification processes Ensure compliance with:SOXITGC controlsNIST / CMMC (where applicable)Internal cybersecurity standards Support audit preparation and remediation activities.

Regulated

Industry: Alignment Ensure SAP S/4 security design supports:ITAR / export control considerations (if applicable)Data segmentation requirements Controlled access to sensitive financial and operational data Maintain audit traceability and documentation standards.

Collaborate with Cybersecurity, Compliance, and Internal Audit teams.

Transport & Governance Oversight Ensure secure transport of roles and authorization objects across environments.

Validate access controls during system refreshes and client copies.

Participate in release governance and cutover readiness.

Maintain detailed documentation for audit and compliance traceability.