Job Overview: Senior SAP Security Administrator
The Financial Systems team provides technology expertise to the finance department and is responsible for SAP, HANA, and connected surrounded systems at Booking.com. Horizontal Services is a key contributor that is part of the Financial Systems (FS) team. Our aim is to support the FS in enabling an optimized IT environment towards achieving the business goals seamlessly and empowers the finance community with efficient financial insights & reportings.
What youll bring: (skill & competency of candidate)
- Minimum 12 years of experience on SAP Authorizations
- Experience in Security Design & Blueprinting, Customization, Implementation and Auditing of SAP Roles & Authorization (ECC/EHP7, BW/BI, GRC, SolMan, BPC,, S/4HANA, Fiori, BW/4HANA, HANA cloud, BTP, SAC etc.) with Greenfield implementation or Conversion projects (must have)
- Expert consulting knowledge in the following solutions GRC Access Control (AC), Identity Access Governance (IAG), GRC Process Control (PC), GRC Risk Management (RM), Single Sign On, SAP BTP Cloud Identity services, etc. would be a big plus. (must have)
- Knowledgeable on different user & role types, SAP Authorization Concept, Roles/Activity Groups, User Administration on different SAP Platforms (must have)
- Good conceptual knowledge of Storage, web apps (FIORI), Single-Sign-On on SAP platforms;
- Strong in Technology security fundamentals and hands on experience on SAP specific products and solutions (must have)
Deep understanding of the SAP authorization architecture with experience in translating functional requirements/processes into user/job role definitions. (must have)Drives constant innovation and steers the Financial Systems group toward solutions that provide efficiency in daily operations, standardize solutions across the enterprise, support, maintain and develop complex technical solutions in a large and geographically distributed office environment.
- Extensive experience in the design & development of SAP security policies/procedures. (must have)
- Experience with various Authentication Methods, Database Security, Network and Communication Security & protecting standard users (good to have)
- Strong skills in the advanced security area like identity theft, data security breaches, data leakages cloud, cyber security and data privacy (good to have)
- Deep understanding on custom transaction technical validation & Co-ordination with functional/ABAP teams
- Prior experience in manage & deliver critical and/or complex issues
- A great customer focus, team player attitude and excellent communication skills in English.
- Has good understanding of periodic sap security reviews/audits & automation to reduce manual interventions
- Working experience on Checking Access Risks & mitigation controls. (must have)
- Good understanding of concepts of Segregation of Duties. (must have)
- Excellent exposure on the risk awareness in SAP Environments (good to have)
- Should have knowledge of all type of Access request & risk analysis (must have)
- Good understanding of concepts of Segregation of Duties. (must have)
- Excellent exposure on the risk awareness in SAP Environments (good to have)
- Ability to learn quickly and apply knowledge effectively.
- Must be able to work as a team player, yet can work independently.
- Possess exceptional interpersonal and communication skills including verbal, written presentation and listening.
- Past experience in working with Fintech / Financial Services organizations with experiences on banking regulations (good to have)
- Possess experience & expertise in working with highly regulated environments (good to have)
- Ability to adapt and function effectively in a fast-paced, changing environment while working under deadlines. (good to have)
A record of taking initiatives, driving results and accepting increasing levels of responsibility.
(good to have)
B.skilled
- Perform Solution Architecting tasks, working on defining solutions in response to client/business request for proposal, technical designs and development of SAP Security functions for programs, projects & change requests. (good to have, but check with Flavio pls)
- Independently handling end-to-end SAP Security project implementations, ability to conduct workshops, manage & plan for UAT, Regression Testing, Cutover & Hypercare activities. (must have)
- Ask right questions/challenges in terms of assessing risks & support the designing of risk frameworks (must have)
- Perform a consulting role in terms of playing a techno-functional SAP authorization SME. (good to have)
- Extensive knowledge of Business process & sub process (good to have)
- Have basic knowledge on programs, tables and other function modules (must have)
- Perform trace analysis & troubleshooting authorization issues (must have)
- Assisting team members in the development and implementation of technical solutions (implementations, upgrades and Migrations). (must have)
- Deliver role design & SoD conflict remediation related projects
- Contribute with hands-on expertise on the technical roles, users & authorisation management requirement s for SAP Systems
- Provide guidance, vision, awareness, and strategy in the SAP Security space and how it influences other areas of the business. (good to have)
- Facilitate technical discussions and decision making in order to ensure performance, scalability and reliability of the provided solutions;
- Will be hands on with GRC access controls and with an extensive automation knowledge. (must have)
- Maintain workflow configuration Design, MSMP and maintain rules to identify risk conditions. (must have)
- Managing system upkeep, assist with system upgrades and patching, with specific focus on SAP security impacts
- Maintaining the GRC risk library, roles and authorisations (R/3, ECC, HANA DB, S4 HANA), User administrations, etc.
- Should be able to handle & configure BRF+ and MSMP workflows in the best and most efficient manner with respect to SAP best practices
- Handle the Audit report analysis & responses (must have)
- Shall be Checking Access Risks & mitigation controls. (must have)
- Shall be handling all type of Access request & risk analysis (must have)
- Combine your knowledge and expertise with the goals of our business to support and maintain a world-class solutions infrastructure and to enable our continued growth;
- Shall be adapting best practices in maintaining large/complex SAP landscapes
- Job location is Bangalore
Pre-Employment Screening
If your application is successful, your personal data may be used for a pre-employment screening check by a third party as permitted by applicable law. Depending on the vacancy and applicable law, a pre-employment screening may include employment history, education and other information (such as media information) that may be necessary for determining your qualifications and suitability for the position.