SAP Security Consultant

Location: On site / Bellville, Cape Town, South Africa
job type: Permanent / Full-time
Sector and subsector: IT | SAP
Salary: Negotiable salary

The SAP Security Consultant is responsible for managing and optimizing user access within the SAP landscape. This role is responsible for designing and maintaining role-based access, administering user authorizations, ensuring compliance with security policies, and supporting audit readiness. The successful candidate will collaborate closely with IT teams, business stakeholders, and audit teams to uphold secure, compliant, and efficient access to SAP systems while continuously improving security processes and controls.

• Design, build, and maintain SAP security roles using the Profile Generator (PFCG), including Single, Composite, and Derived Roles, in line with the principle of least privilege.
• Administer SAP users and authorizations using SU01, SU10, and related SAP security tools.
• Manage and maintain SU24 authorization proposals and authorization object relationships.
• Investigate and resolve authorization issues using SAP tracing tools such as SU53 and ST01.
• Monitor and maintain SAP Security Audit Logs and support system hardening activities.
• Implement SAP Security Notes and support security patching requirements.
• Manage custom authorization objects and collaborate with ABAP developers to ensure appropriate authorization checks.
• Identify, assess, and mitigate Segregation of Duties (SoD) conflicts in collaboration with business stakeholders.
• Support compliance requirements including SOX, ITGC, GDPR, and internal security policies.
• Support internal and external audits by providing compliance reporting, evidence, and remediation plans.
• Collaborate with SAP Basis teams on system-level security, transport management, and security-related configurations.
• Support SAP implementations, upgrades, conversions, and migration projects.
• Produce and maintain security documentation, role design standards, and governance processes.
• Provide guidance on SAP security best practices and continuously improve security controls and processes.

• Extensive experience designing and maintaining SAP Security Roles using PFCG.
• Strong understanding of role-based access control and the principle of least privilege.
• Experience with SU24 Authorization Object Check Maintenance.
• Experience administering users through SU01, SU10, and managing Dialog, System, Service, and Communication user types.
• Familiarity with SAP Security Audit Logs, SAP Security Notes, SU53, and ST01.
• Strong understanding of Segregation of Duties (SoD) principles and risk mitigation practices.
• Knowledge of SOX, ITGC, GDPR, and broader compliance frameworks.
• Ability to support audit activities and produce compliance reporting.
• Excellent communication skills with the ability to explain technical authorization concepts to non-technical stakeholders and auditors.
• Strong collaboration skills when working with SAP Basis teams, ABAP developers, and business stakeholders.
• Strong analytical and troubleshooting skills with a methodical approach to problem solving.
• Excellent documentation, stakeholder management, and prioritisation skills.

• 3 to 5 years of hands-on SAP Security Administration and Implementation experience for mid-level candidates.
• 6+ years of SAP Security experience for senior candidates.

• PFCG Role Design and Maintenance
• SU24 Optimization and Authorization Maintenance
• SU01 User Maintenance
• SU10 Mass User Administration
• SU53 and ST01 Troubleshooting
• SAP Security Audit Logs
• SAP Security Notes Implementation
• Experience supporting internal and external audit cycles.
• Experience identifying and mitigating Segregation of Duties…