SAP Authorisation Consultant (S/4HANA & Fiori Security) (Contract) - Gauteng/Hybrid - ISB3602002

Introduction

Our Client is seeking an Expert SAP Authorisation Consultant to join the core SAP Engineering team within their global IT Hub, driving security and access governance for the " Services: Finance & Controlling (FI/CO) " product domain.

Operating as an expert-level SAP Security Architect and regional industry leader, you will lead the end-to-end design, implementation, and governance of scalable, audit-compliant SAP role concepts across complex ECC and SAP S/4HANA landscapes.

In this role, you will safeguard enterprise financial systems, manage Segregation of Duties (SoD) risks, optimize SAP Fiori security architectures, and lead security workstreams across global implementation, upgrade, and transformation programs.

Who This Role Would Suit

This position is tailor-made for an authoritative Principal SAP Security Consultant or Lead Authorisation Architect who excels at securing complex, multi-system SAP landscapes undergoing S/4HANA and Fiori transformations.

It is an ideal fit for an expert who combines deep technical diagnostic precision (STAUTHTRACE, SU24, ICF/OData) with a strategic understanding of financial governance, SoD risk controls, and global audit compliance.

You are an influential, highly diplomatic technical leader who negotiates operational and tactical security objectives with ease, comfortably interfacing between Basis engineers, corporate auditors, enterprise architects, and global business stakeholders.

You bring a structured, detail-oriented approach to role design and system integrity, capable of solving escalated security challenges independently. If you are ready to take definitive architectural ownership of SAP authorisations supporting a premier global IT hub, this expert-level track provides an outstanding platform.

• S/4HANA, ECC & Fiori Security Architecture: 8–12+ years of specialized SAP Security and Authorisations experience across enterprise ECC and S/4HANA environments, with expert mastery of SAP Fiori security (Launchpad, Spaces & Pages, Catalogs, Business Roles) and ICF/OData HTTP-based security layers.

• Role Design, SU24/SU25 & SoD Governance: Deep expertise in role design, SU24/SU25 proposals, organizational levels, role optimization, and executing Segregation of Duties (SoD) analysis and risk mitigation aligned with strict audit standards.

• Expert Technical Leadership & Audit Readiness: Best-practice industry leader capable of handling complex single-system and multi-system security challenges, guiding Functional, Basis, and Architecture squads, and solving escalated security tasks with no senior authority to defer to.

Position Details

• Contract Dates: 01-10-2026 to 31-12-2029

• Location: Midrand / Menlyn / Rosslyn / Home Office Rotation

• Level: Expert (8+ Years related experience)

Duties & Responsibilities

Key Responsibilities

• Security Solution Architecture & Design: Lead the design, implementation, and governance of SAP security solutions, creating scalable and compliant role concepts for S/4HANA and ECC.

• S/4HANA Transformation Leadership: Lead security activities during SAP implementations, upgrades, migrations, and S/4HANA transformation projects.

• Fiori & Gateway Security Control: Provide expert guidance on SAP Fiori, Gateway, ICF, and OData security configurations and role assignments.

• SoD & Audit Remediation: Conduct Segregation of Duties (SoD) analysis, implement risk mitigation measures, and provide security evidence and remediation plans for internal and external audit reviews.

• SU24 Governance & Transport Control: Review and approve role designs, SU24 proposals, and security configurations while ensuring transport governance via CALM/ChaRM.

• Technical Mentorship & Collaboration: Collaborate closely with Functional, Basis, Development, and Architecture teams while mentoring junior security consultants.

Important Application Details

Location & Relocation

Applicants based outside of Gauteng must be willing to relocate to Midrand/Menlyn/Rosslyn. Please note that relocation to the province will be at the candidate's own cost.

Eligibility & Legal

• Citizenship: South African citizens and residents are preferred.

• Work Permits: Candidates with valid work permits will be considered.

• Privacy: By applying, you consent to being added to our database and receiving updates until you unsubscribe.

Application Status

If you do not receive a response within 2 weeks, please consider your application unsuccessful.

#isanqa #isanqaresourcing #fuelledbypassionintegrityexcellence #thegroup #SAPAuthorisation #SAPSecurity #S4HANA #FioriSecurity #FI_CO #SU24 #STAUTHTRACE #ChaRM #SAPConsultant #DevOps #TechJobsSA #GlobalTechJobs

Desired Experience & Qualification

Qualifications & Experience

• 8–12+ years of dedicated SAP Authorisations experience within complex, high-availability enterprise environments.

• Proven track record leading SAP Security workstreams across multiple full-lifecycle SAP implementation, upgrade, migration, or S/4HANA transformation projects.

• Extensive background in enterprise role design, security architecture, transport governance (CALM/ChaRM), and compliance.

• Strong application operations and production support background, with experience coaching and mentoring junior security consultants.

• SAP Global Certification is highly desirable.

Essential Skills & Technologies

SAP Security, Fiori & System Architecture

• Expert knowledge of SAP Security and Authorisations across ECC, S/4HANA, and core modules (FI/CO, MM, SD).

• Expert knowledge of SAP Fiori Security: Launchpad configurations, Spaces & Pages, Catalogs, and Business Roles.

• Advanced knowledge of SAP Gateway, ICF, OData Services , and HTTP-based security.

• Expert usage of SAP authorisation troubleshooting tools: STAUTHTRACE, STUSERTRACE, Gateway Error Logs, and trace diagnostics.

Governance, Role Optimization & Transport Control

• Advanced expertise in role design, SU24, SU25, organizational levels, and role optimization.

• Strong understanding of SAP transport management (CALM / ChaRM) and secure deployment processes.

• Extensive knowledge of Segregation of Duties (SoD), SAP security governance frameworks, and audit support.

• Technical documentation, solution design, advanced Excel reporting, and automation capabilities.

Advantageous Skills

• Experience with SAP Cloud Identity Services (IAS / IPS) and Identity & Access Management (IAM) frameworks.

• Scripting or automation capabilities for SAP Security administration tasks.

• Familiarity with AI tools and copilots (SAP Joule, GitHub Co-Pilot) for operational enhancement.

• Practical Agile delivery experience using Jira and Confluence within cross-functional feature teams.

Interested?

Explore Our Latest Opportunities:   iSanqa Careers Page

Stay in the Loop:   Subscribe to our weekly mailing list   so you don’t miss out!

Join Our Job Notification Channels:   Stay updated on WhatsApp or choose your specific field on Telegram:

WhatsApp Channel   |   IT Roles (Telegram)   |   SAP Roles (Telegram)

Pharmaceutical & Medical (#)   |   Finance (#)   |   Manufacturing & Engineering (#)

Supply Chain & Procurement (#)   |   Sales & Marketing (#)

Communication Preferences:   Please let us know how you would like us to manage your details:

Opt-In:   I want to receive updates on new opportunities via mail, call, or text.

Database Only:   Keep my profile on file, but do not contact me.

Remove:   Completely remove my details from the database.