Job purpose
Leads the design, governance, and administration of SAP Technical Security to ensure the confidentiality, integrity, and availability of SAP systems and data. The role provides expert support for SAP Access Control through the SAP GRC suite, advises both business and SAP technical teams on best‑practice security models, and develops strong access and compliance controls across all SAP landscapes. It safeguards the organization from internal and external threats, ensures alignment with regulatory and corporate requirements, and promotes a culture of security awareness across the enterprise.
The position will act in accordance with the Group’s Mission, Vision, Values & Strategies, as well as, policies, guidelines, and standards, supported by an IT Technology platform, HSE standards, Omani’s government & other legal justifications, and best international practices in consonance with national objectives.
Main tasks and responsibilities- Develop and maintain SAP security policies, standards, and guidelines aligned with best practices, regulatory requirements, and corporate governance.
- Design and implement role-based access control (RBAC), authorization concepts, and segregation of duties (SoD) frameworks to ensure least‑privilege access.
- Architect and design SAP security solutions that meet OQ GRC requirements.
- Implement and maintain security controls within S/4
HANA, BW/BI, SAP SCM, SAP BTP and Business Objects. - Work directly with business users to establish security controls that support compliance while enabling business operations.
- Provide expert-level operational support for SAP production security incidents, enhancements, role design, authorization errors, user administration, and SAP GRC system management.
- Monitor and self-assign incoming SAP security and user administration tickets, ensuring timely and accurate resolution.
- Manage user provisioning, role assignments, and access requests using SAP Identity Management (IDM), SAP Access Control (GRC), and relevant IAM tools.
- Conduct periodic user access reviews, access certifications, and compliance assessments to ensure adherence to policies and regulations.
- Collaborate with the Cybersecurity/SOC team to review SAP‑related SIEM alerts, security events, and audit logs, providing SAP expertise during investigations.
- Investigate security incidents, perform root cause analysis, and coordinate resolution with IT Security, SAP Basis, and business stakeholders.
- Conduct regular security audits, assessments, and compliance reviews to validate the effectiveness of SAP controls and recommend remediation actions.
- Prepare documentation and evidence for internal and external audits, ensuring compliance with requirements such as GDPR and SOX.
- Perform vulnerability assessments, security scans, and penetration tests on SAP systems to identify and remediate weaknesses.
- Coordinate the deployment of SAP security patches, notes, and corrections to maintain system integrity.
- Deliver SAP security awareness training for users, administrators, and stakeholders to strengthen the organization’s security culture.
- Develop security procedures, guidelines, and training materials tailored to different user roles and business processes.
External: 3rd party Contractors, Vendors & Suppliers
Notable Working ConditionsOffice environment, intensive computer screen use, sporadic visits to operation site.
Education requirements- A minimum of a Bachelor’s degree IT or related disciplines.
- Certification in SAP security (e.g., SAP Certified Technology Associate - Security with SAP Net Weaver), is a plus.
- SAP Basis Certified, SAP GRC Certified and relevant cloud/security certifications are a plus.
Excellent knowledge of written, read, and spoken English (required)
Competencies and skills- A minimum of 8-10 years of experience in SAP security roles, with expertise in SAP security architecture, user management, access controls, and compliance.
- Experience with security standards, frameworks, and regulations such as ISO 27001, NIST Cybersecurity Framework, GDPR, and SOX.
- Experience in leading teams of SAP Security and SAP GRC Resources
- Experience in implementing SAP Basis and Security…
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).