SAP Security & IAG Consultant

Title: SAP Security & IAG Consultant

Location: London Remote - (Occasional travel for workshops)

Contract Duration: 6 months (with potential to extend)

Deloitte:

Working with the Deloitte Associate (Contractor) Programme means we can offer you the opportunity to work on a variation of industry and client related projects. Our aim is to retain the best talent and so when your project end date nears our team of Talent Community Advisors will be working with you to look at alternative projects within the firm that suit your experience should you wish to continue with Deloitte.

The Role:

We are seeking an experienced SAP IAG Technical Consultant to lead and implement robust security solutions for an S4 Hana Transformation project for one of our Public Sector clients. The ideal candidate will have deep expertise in SAP Security and hands-on experience with SAP tools and methodologies for managing security and compliance across SAP environments. You will be responsible for designing, implementing and re-designing security roles, ensuring secure and compliant systems for our clients.

You will demonstrate and develop your capabilities in the following areas:

1. Requirement gathering, design and build roles, profiles and authorisations for On-prem and cloud SAP system (e.g. ECC, S/4HANA, BW) to enforce appropriate access controls.
2. Configure and implement SAP Identity Access Governance (IAG) and Access Controls (AC) tool for auto provisioning and access risk management.
3. Understand the segregation of duties requirements and embed in the security role design .
4. Work with internal and client stakeholders including technical, internal/external auditors and business process teams to ensure secure integrated solution.
5. Prepare periodic status reporting, training content and support in knowledge transition activity .
6. Deliver documentation for security approach, role design matrix, and user guides.
7. Strong understanding of IT Controls for S/4 HANA and other relevant SAP application suite

Essential Skills & Experience:

• Must be eligible and willing to obtain UK Government Security Clearance (i.e. lived and worked in the UK for a minimum for 5 years)
• Deep understanding of SAP security and authorisation concepts, user roles, profiles, and good practices.
• Strong technical skills in S/4HANA and SAP Fiori, SAP Identity Access Governance (IAG), Access Controls (AC) and cloud applications such as SAP Analytics Cloud (SAC).
• Understand and analyse the segregation of duties report and remediate the risks from the roles.
• Assess risks, conduct root cause analysis and implement good practice solution for complex security challenges.
• Execute current state assessment for the security level of an existing system and providing solution to identified weaknesses.
• Strong troubleshooting skills and the ability to resolve security issues quickly and efficiently.
• Excellent verbal and written communication skills; lead discussions, explain technical details and collaborate effectively with stakeholders.
• Independently work under intense timelines in a client facing role and maintaining a professional demeanour.
• Proficient in the use of Microsoft Office Excel for analytics and Word, PowerPoint is a plus.

Desirable Skills & Experience:

• Professional certification such as SAP Certified Technology Professional, SAP Access Control 12.0, CISSP, CISM or other security certs.
• Strong understanding of Business Process Controls for S/4 HANA and other relevant SAP application suite
• Knowledge and application of regulatory requirements such as SoX, GDPR etc.

IR35

As a means of managing tax, commercial and reputational risks, Deloitte prohibits the use of Associates through Personal Service Companies (‘PSCs’). All Associates must contract under PAYE arrangements through a Deloitte approved ‘Employment Company’ (aka ‘umbrella company.’)