Senior SAP Security Expert (M/F/D)

Why this job matters

Your responsibilities:

• Be a subject matter expert (SME) on Offensive SAP Security – provide guidance and steer for senior Stakeholders, non-technical as well as technical experts.
• Perform SAP Red Team Excercises - conduct offensive technical cybersecurity engagements of varied nature, plan and execute long running SAP security testing operations (simulated cyber attacks) against SAP systems and their operating environment.
• Record Keeping - maintain detailed documentation of all red team activities, findings, recommendations and present reports to senior management and key stakeholders.
• Stay up to date with the latest trends and development in SAP security and cyber-threats. 
• Have excellent communication skills – ensure continuous stakeholder management.
• Conduct assessments of SAP environments, identify gaps, vulnerabilities, misconfigurations, and maturity gaps and develop technical security guidance and remediation plans (costs, benefits, risk minimization, etc.).
• Develop and implement the global cyber security roadmap for SAP, considering the business and IT strategy, current and target states and key risks as well as important gaps. 
• Define and develop cybersecurity technical standards, security architecture, security requirements as well as configuration baselines for our SAP environment. 
• Be a communication master – ensure continuous stakeholder management with business and IT, identify gaps, propose holistic solutions and achieve group-wide endorsement.

Job Skills/Competencies Required

Your profile:

• At least 5 years of hands-on experience performing SAP offensive security exercises (red teaming) as well as SAP security assessments e.g. against SAP security baselines and recommendations.
• At least 5 years of SAP security (technical design), SAP controls design, defining SAP standards, authorization concepts, defining SAP security remediation, best practices, baseline configurations, etc. 
• Proven experience defining baselines security configurations and designing multiple SAP security projects / solutions for both ECC/R3 and S4/HANA.
• Proven experience defining baselines security using SAP security capabilities (Identity Provisioning, Credential Store, SAP Data Custodian, SAP HANA Security, SAP Access Control, SAP Cloud Identity Service, …).
• Several years’ experience in IT security in multiple domains (IAM, Data Security, Network, …)  
• Excellent communication and presentational skills 
• Excellent English language skills.
• Advantage – SAP Certified Professional - SAP Enterprise Architect
• Advantage - SAP Certified Associate - Security Administrator / SAP Certified Technology Professional - System Security Architect
• Advantage – experience driving security architecture solutions as a consultant e.g. as an SAP solution architect