SAP IAM Security Specialist – Porto | Portugal

Description

Requirements

Responsibilities

· Advise business stakeholders on authorization concepts and Segregation of Duties (SoD) principles

· Translate business access policies and requirements into technical roles/concepts and implement them across system landscapes

· Drive and contribute to IAM/security & authorization projects (on‑premise & cloud) including rollouts and improvements

· Monitor compliance and critical access; support periodic access reviews and recertifications

· Define and continuously improve security architecture as well as security‑relevant processes, policies, guidelines, and documentation

· Assess audit findings and security risks and implement remediation measures for sustainable risk reduction

Years of experience

· 5+ years of proven experience as an SAP IAM Security Specialist, or similar role.

Functional Skills

· Deep understanding of SoD governance, role/authorization design principles, and business-to-IT translation of access requirements.

· Knowledge of end-to-end access lifecycle processes (request/approval/provisioning/change/removal) and related compliance controls.

· Experience with access review/recertification concepts, critical access management, and evidence/documentation requirements.

· Familiarity with audit and risk management practices (control testing, findings management, remediation tracking).

· Ability to work with business process owners and IT teams to define scalable authorization models and operating procedures.

· Strong documentation skills for policies, procedures, and governance models (incl. RACI, control descriptions).

Technical Skills

· IAM / Authorization concept design (RBAC/ABAC), role engineering, and lifecycle management.

· SAP authorizations (e.g., PFCG roles) and Segregation of Duties (SoD) rule set handling; SAP GRC/Access Control knowledge is a plus.

· Identity Governance & Administration (IGA) and provisioning concepts (joiner/mover/leaver, access reviews/recertifications).

· ITIL / IT Service Management (incident/change/problem & access request processes).

· Risk & control frameworks (e.g., internal controls, audit preparation & evidence handling).

· Project delivery methods (waterfall & hybrid) for IAM/security rollouts.

Soft Skills

· Strong business process understanding and ability to align IAM/authorization solutions with business needs.

· Analytical and conceptual thinking; creative problem solving with a pragmatic, hands-on mindset.

· Clear communication skills (written & verbal) and ability to explain complex security topics to non-technical stakeholders.

· Proactive attitude, ownership, and high sense of responsibility for secure and compliant outcomes.

· Structured way of working, prioritization, and resilience in a dynamic environment.

Languages

· Fluency in English (mandatory).

Benefits