Manager - Technology Risk Advisory – SAP Security and Authorizations

Day-to-day, you will lead SAP security and authorization transformation initiatives, design robust security frameworks, and provide expert guidance on managing access controls and security risks within SAP environments, notably SAP S/4HANA implementations.

Manage the delivery of projects, actively engaging with clients and overseeing quality and performance of teams.

Drive growth by expanding our SAP Security offering and onboarding high-value clients.

Lead strategic initiatives to help clients assess SAP security risks, define resilient security controls and frameworks, and establish good-practice security processes with long-term compliance roadmaps.

Design comprehensive SAP security baselines and authorization concepts, including roles and Segregation of Duties rulesets for various SAP systems, such as SAP ECC and S/4HANA.

Conduct comprehensive SAP security assessments and implement SAP cyber security controls aligned with industry frameworks (e.g. NIST Cybersecurity Framework, ISO 27001, CIS Controls).

Implement solutions (e.g. SAP GRC, SAP Ariba, etc.) that optimize processes and deliver innovative solutions to complex SAP security challenges at our clients.

Work with best-in-class AI solutions to deliver value to clients.

Contribute to the further improvements of innovative AI and automation tools and assets that drive the future of SAP security and authorization transformation.

Collaborate across multidisciplinary teams to support go-to-market strategies and develop cutting-edge SAP security offerings.

Our SAP Security and Authorization team, part of the Controllership & Treasury team within Technology & Transformation, has been one of the fastest-growing teams in Switzerland over the last years. Thus, we can offer unrivalled career growth & learning opportunities as well as an exciting place to work. Successful candidates will get the opportunity to help us shape the future of application security, develop further our market offering and work closely with the world-top organizations on their digital transformation journeys.

With more than 460’000 employees globally, Deloitte is the largest professional services firm in the world, with offices in more than 150 countries.

In Switzerland, we provide a wide range of integrated services in the areas of Audit & Assurance, Tax & Legal, Strategy, Risk & Transactions, and Technology & Transformation. With around 2,500 employees at six locations, we serve companies and organisations of all sizes in every industry sector. Experience endless opportunities for professional growth, where you can bring in your entrepreneurial spirit while advising top-tier organizations on cutting-edge interdisciplinary projects within a global environment.

Join a collaborative culture where you can work flexibly alongside talented, inspiring colleagues from over 70 nationalities.

• You are proactive, adaptable, keen to grow and have strong interpersonal and communication skills, focused on building outstanding relationships with clients.

• You are able to manage end-to-end sales processes / “RFP” related dynamics for medium/high complexity clients. Experience in a leading Consulting firm will be considered a plus.

• Minimum of 5 years of relevant professional experience in SAP Security and Authorizations, including authorization frameworks, role concept and design (attribute-based (ABAC) and role-based access controls (RBAC)), Segregation of Duties, and GRC technologies. Hands-on experience with SAP security solutions beyond SAP GRC is a plus.

• Proven expertise in implementing SAP S/4HANA, including business process mapping, technical configuration of authorizations, and Fiori.

• You have proven experience in Cyber Security Frameworks and Application Security, with hands-on expertise in managing SAP System Security (e.g. patch and vulnerability management, system parameters, connectivity, technical users, secure code etc). Experience with SAP Security Software and Tools is a plus.

• Fluent in English, with the ability to engage effectively with diverse stakeholders. Additional languages, such as German or French, is a plus.

• Relevant certifications: CISM, SAP Certifications, CISSP, CISA

• Experience with SAP BTP (Business Technology Platform) security, including identity and access management (IAM), API security, secure integration patterns, and cloud-native security controls. Knowledge of SAP BTP security best practices and threat modelling is a plus.

• You understand the operating models to be put into place for efficient day-to-day SAP security processes. Experience with near- and off-shore models is a plus.

• Demonstrated experience with artificial intelligence (AI), such as leveraging AI tools or solutions within risk, security, or SAP-related contexts (e.g., AI-driven access control analysis, intelligent risk assessment, automation of security controls).

• Coaching, team management and problem resolution skills are part of your strengths.