SAP Authorisations Specialist

Purpose

The SAP Authorisations (Security) Specialist is responsible for the design, build, administration and governance of SAP security roles and authorizations across the TNPA SAP landscape. The role protects the confidentiality, integrity and availability of SAP information by ensuring appropriate, compliant and auditable access for all users.

The incumbent designs and maintains the SAP role and authorization concept, manages user provisioning, and supports Segregation of Duties (SoD) and compliance across the environment in support of TNPA’s risk and governance objectives.

Responsibilities

• Design, build, test and maintain SAP authorization roles (single, composite and derived) and the overall role / authorization concept across the TNPA SAP landscape.
• Administer user provisioning – create, amend, lock / unlock and delete users – and manage user master data and access requests through defined workflows.
• Implement and maintain Segregation of Duties (SoD) controls, analyse and remediate SoD conflicts, and support Governance, Risk and Compliance (GRC) Access Control where applicable.
• Support security across the landscape components (ECC / S/4HANA, Fiori catalogues and groups, Solution Manager and integration components).
• Perform security troubleshooting and authorization traces and resolve access-related incidents in line with the agreed SLAs.
• Support internal and external audits, prepare and maintain security documentation, and provide evidence for control checks.
• Define and enforce security standards, naming conventions and processes for role management and user administration.
• Manage security changes through the transport landscape in conjunction with the SAP Basis team.
• Provide status and access-review reporting to management and the Governance, Risk and Compliance function.
• Ensure compliance with audit, control-check and security requirements at the application layer.

Position Challenges

• Balancing appropriate business access against Segregation of Duties and least-privilege principles.
• Maintaining a clean, auditable authorization concept across evolving modules and Fiori applications.
• Remediating SoD conflicts without disrupting operational access.

Decision Making

• Determine role-design and authorization solutions within security standards and the change-management framework.
• Recommend access approvals, remediations and mitigating controls for SoD conflicts.
• Advise the business and the GRC function on access risk and security posture.

Qualifications and Experience

• Bachelor’s degree / National Diploma in Information Technology, Computer Science or a related discipline.
• SAP Security / Authorizations (and / or GRC Access Control) certification is advantageous.
• 5–7 years’ SAP security / authorizations experience.
• Experience with SAP GRC Access Control and / or S/4HANA & Fiori security is a strong advantage.

Skills Required

• Strong knowledge of the SAP authorization concept, role design (single / composite / derived) and user administration.
• Experience with Segregation of Duties analysis and remediation and with SAP GRC Access Control.
• Knowledge of Fiori, Solution Manager and integration-component security.
• Understanding of information-security principles and audit / compliance requirements (e.g. ISO 27001, COBIT).
• Excellent analytical, problem-solving and documentation skills, attention to detail, and the ability to handle highly confidential information professionally.

How to apply — This position is immediate. If interested, please send your CV to HR@africaone-consulting.com as soon as possible for consideration and the next steps. Kindly indicate the role applied for in the subject line.

Pay: R50 000,00 - R250 000,00 per month

Work Location: Hybrid remote in Durban, KwaZulu-Natal