SAP Principal Consultant - Security

Company Description

Water Utility Company based in Yorkshire region of England.

We have an exciting opportunity for a SAP Principal Consultant to join the IT team at Yorkshire Water and be a part of helping Yorkshire Water provide the best service to its customers.

Hello! Thanks for stopping by. Let us tell you about all the great reasons to join us here at Yorkshire Water:

• Competitive salary, dependent on experience.
• Annual incentive related bonus (£1000 maximum bonus opportunity).
• Attractive pension scheme (up to 12% company contribution).
• Development opportunities in line with the SAP Principal Consultant progression plan.
• 25 days annual leave plus bank holidays and an extra wellness day.
• Life assurance cover of 4 times pensionable salary.
• Health cash plan scheme, critical illness insurance, dental insurance, life assurance flex and partner cover.
• Retail savings scheme.
• Online GP service, cycle to work scheme, gym membership discounts and many more.

Buttershaw / Hybrid Working (1‑2 days in the office a week, Bradford).

Permanent. 37 hours per week, Monday‑Friday.

Yorkshire Water serves over 5.4 million residents and millions of visitors in the Yorkshire region, ensuring clean drinking water and reliable wastewater services. Beyond this core function, we protect the environment, plan for future water challenges, and support community wellbeing. With new environmental legislation and significant investment, the IT team plays a key role in meeting evolving customer and regulatory expectations.

• Lead the design and build of SAP Security and GRC solutions.
• Contribute to the SAP security strategy aligned with enterprise security requirements.
• Interpret business requirements for SAP GRC modules including Access Request Management (ARM), Access Risk Analysis (ARA) & Emergency Access Management (EAM).
• Ensure compliance with Segregation of Duty (SoD) and Sensitive Access rules in ARA.
• Maintain Risk and Access Controls compliance throughout SAP role build.
• Support user provisioning and access review workflows in ARM.
• Maintain and support SAP Security and GRC modules.
• Provide technical support for SAP technologies including Centralised User Administration, Identity Management (IdM), Single Sign-On, and SAP GRC.
• Ensure audit compliance and support privacy standards in reporting.
• Share SAP Security best practices and mentor junior team members.
• Stay up to date with new business processes and support security assessments.
• Enforce security policies through periodic reviews of security reports.
• Collaborate with outsourced AMS provider.

• Proven ability to build SAP technical and functional roles based on design outputs.
• Strong understanding of SAP Security fundamentals, including authorization concepts, roles/activity groups, and user administration.
• Expertise in SAP GRC modules:
  Access Request Management (ARM), Access Risk Analysis (ARA), Emergency Access Management (EAM).
• Ability to configure SoD and Sensitive Access rules in ARA.
• Experience with SAP Identity Management (SAP IDM).
• Deep knowledge of information security principles, role‑based access controls, and distributed systems administration and recovery.
• Demonstrated success in implementing SAP security users and roles to meet business requirements.
• Strong background in SAP security design, analysis, configuration, compliance, and implementation across multiple projects.
• Familiarity with security concepts and user/role administration across various SAP products.
• Experience managing SAP security in ECC 6.0, S/4
  
  HANA, and SAP Public Cloud environments.

We operate 24/7/365 but support flexible working patterns and job‑share options where possible. Successful candidates will undergo pre‑employment checks, including a Basic Disclosure Check and potentially a Counter‑Terrorist or Security Check clearance. All roles are subject to a medical questionnaire and further medicals if required.

We are committed to removing barriers and ensuring our recruitment process is accessible to everyone. We offer a range of adjustments to make your application experience as comfortable and straightforward as possible. If you have an accessibility need, disability or condition that requires changes to the recruitment process, please include this information in your application so we can discuss the required adjustments.

Kelda Group reserves the right to close this position before the published closing date, should the need occur. Please complete and submit your application as soon as possible.