SAP Security Specialist/Lead

Responsibilities:

1. Provide advice to Secure SAP Application Development, monthly advice, and coordination on SAP System and Application Vulnerability Management (with SecurityBridge during the project phase)

2. Deliver guidance on SAP Cryptography, Key Management, and SAP Data Protection

3. Advise and manage SAP Identity and Access Control and integration with Client’s IAM

4. Provide assistance and coordination on SAP and Security Monitoring Integration

5. Assist project lead in security governance project and daily standup for security tasks, and assign daily goals and outcomes for the team

6. Collaborate with the project lead to plan and review bi-weekly security plans to ensure deliverables are on time

7. Work with the project lead to assist ad hoc architecture design review with technical architect and functional teams

8. Prepare for weekly design authority forum with client security architect (SA)

9. Engage Agency/Ministry CISO to update on security progress and potential risk items

10. Prepare security testing and identify risks to be registered into the risk register

11. Review weekly vulnerability report and drive toward remediation

Requirements:

1. Possess a bachelor's degree in Information Technology, IT Security or any related field

2. Minimum of 7–10 years working experience in security consulting space

3. Mandatory experience in SAP roles designed for Security

4. Experienced in SAP GRC (Access Control and Process Control) design and implementation for Security

5. Required to come up with an approach to mitigate SAP SoD conflicts

6. Preferably experienced in integrating SAP with AD or any IGA tools

7. Experienced in working in the SAP Security advisory

8. Exposed to SAP BTP technology

9. Excellent to demonstrate knowledge of SAP Application Security

10. Good understanding of SAP application security implementation methodologies, role-based access controls, and different application threats

11. Experienced in running SAP vulnerability assessment tool used in CyberSecurity and audit and compliance activities

12. Contribute to a strong client relationship through interactions with client personnel

13. Understand engagement as it relates to the client's business

14. Communicate client expectations to the engagement team