TheIT Software Security Engineer is responsible for designing access roles for the SAP S4H environments across multiple domain such as finance, supply, procurement, engineering etc. • Implement best practices in the area of Role build, testing and transport. • Define Role Transport strategy for a highly complex multi-tier environments with separate Sustain and Project Tier. • Propose security best practices for Solutions built on SAP BTP. • Review and share access controls, authentication protocols for 3rd party apps integrations. • Define SOD Risks and mitigation controls by collaborating with process experts, GRC Teams. • Provide input to GRC technical teams to update SoD risk matrix with new transaction codes/Fiori apps etc. • Review custom code, & propose authorization check to ensure Organization level controls can be implemented via roles. • Review and update authorization defaults for transactions, Fiori apps, Web-dynpros etc. • Experience of defining audit controls, engage with auditors to drive internal and external audit evidence gathering. • Assist in design, document and continually enhance SAP security administration policies, processes, and procedures for the SAP environment. • Support the project teams on SAP Transports using during major releases, dual maintenance/retrofit and object conflict issue resolution • Update and maintain procedure documentation, present to larger team. • Propose technical governance (standards, best practices, etc.), document and present to Larger team. • Bachelor's or Master's degree in Information Science, Computer Science or related field • 8 to 10 years of SAP Security Experience • Minimum 2 S4H Greenfield/ Brownfield implementation Experience • Experience of working on complex SAP rollout projects • Excellent communication, verbal, presentation and written skills English Level: Intermediate