Job Description & Details
The gig is a contract‑only SAP Security role based out of Culver City, focused on keeping S/4HANA, BW/4HANA and GRC environments locked down. You’ll be the go‑to person for role design, SoD checks, and day‑to‑day access tickets – a real‑world security ops shop.
What You'll Actually Be Doing
You’ll spend most of your day in the SAP Security cockpit: creating and tweaking roles, moving them through transports, and handling user provisioning requests. When a user hits an authorization error, you’ll dig into the profile, cross‑check SoD rules, and fire off a fix. The role also involves running regular access reviews, responding to incident tickets, and collaborating with functional and technical teams to align security with business changes. Expect a mix of hands‑on troubleshooting and strategic compliance work.
The Core Tech Stack
The must‑know stack is SAP S/4HANA security, BW/4HANA authorizations, and the full GRC suite (ARA, BRM, ARM, EAM). You’ll also need to be comfortable with Fiori security objects—catalogs, groups, and pages—because a lot of the UI access lives there. The role leans heavily on ITIL/ITSM processes for ticket handling, so familiarity with change management and incident workflows is non‑negotiable.
Interview Expectations
- Design a role for a sales analyst who needs S/4HANA sales data and Fiori analytics while staying SoD‑clean. The interviewer wants to see how you break down business requirements, map them to authorization objects, and run a quick SoD check.
- Walk through troubleshooting a user receiving an "Authorization Failure" in GRC ARA. They’re looking for a systematic approach: check the user’s role, the relevant risk analysis, the underlying profile, and how you’d document and close the ticket.
Application Advice
Tailor your résumé to scream SAP Security Administration, S/4HANA, BW/4HANA, and GRC (mention ARA, BRM, ARM, EAM explicitly). Highlight any Fiori security work, role‑creation and transport experience, and concrete SoD analysis projects. Sprinkle in “ITIL”, “ITSM”, “access reviews”, and “compliance” to beat the ATS. A short bullet on “long‑term contract” or “consulting” experience will also line up with the hiring manager’s expectations.