(Senior) Consultant - Technology Risk Advisory – SAP Security and Authorizations

Lead SAP security and authorization transformation initiatives, design robust security frameworks, and provide expert guidance on managing access controls and security risks within SAP environments, notably SAP S/4HANA implementations. Participate in strategic initiatives to help clients assess SAP security risks, define resilient security controls and frameworks, and establish good-practice security processes with long-term compliance roadmaps. Design and implement comprehensive SAP security baselines and authorization concepts, including roles and Segregation of Duties rulesets for various SAP systems, such as SAP ECC and S/4HANA. Conduct comprehensive SAP security assessments and control testing throughout to ensure ongoing compliance with security standards and internal policies. Implement and configure SAP security solutions (e.g. SAP GRC) to address client security challenges. Support the delivery of SAP security transformation initiatives, collaborating with clients and internal teams. Work with best-in-class AI solutions to deliver value to clients. Contribute to the further improvements of innovative AI and automation tools and assets that drive the future of SAP security and authorization transformation. Collaborate across multidisciplinary teams to support go-to-market strategies and develop cutting-edge SAP security offerings.

Our SAP Security and Authorization team, part of the Controllership & Treasury team within Technology & Transformation, has been one of the fastest-growing teams in Switzerland over the last years. Thus, we can offer unrivalled career growth & learning opportunities as well as an exciting place to work. Successful candidates will get the opportunity to help us shape the future of application security, develop further our market offering and work closely with the world-top organizations on their digital transformation journeys.

• Minimum of 3-5 years of relevant professional experience in SAP Security and Authorizations, including authorization frameworks, role concept and design (attribute-based (ABAC) and role-based access controls (RBAC)), Segregation of Duties, and GRC technologies. Hands-on experience with SAP security solutions beyond SAP GRC is a plus.

• Proven expertise in implementing SAP S/4HANA, including business process mapping, technical configuration of authorizations, and Fiori.

• Foundational knowledge of Cyber Security Frameworks and Application Security, with hands-on expertise in managing SAP System Security (e.g. patch and vulnerability management, system parameters, connectivity, technical users, secure code). Experience with SAP Security Software and Tools is a plus.

• Fluent in English, with the ability to engage effectively with diverse stakeholders. Additional languages, such as German or French, is a plus.

• You understand the operating models to be put into place for efficient day-to-day SAP security processes. Experience with near- and off-shore models is a plus.

• Demonstrated experience with artificial intelligence (AI), such as leveraging AI tools or solutions within risk, security, or SAP-related contexts (e.g., AI-driven access control analysis, intelligent risk assessment, automation of security controls).

• Foundational knowledge of SAP BTP (Business Technology Platform) security, including identity and access management (IAM), API security, and secure integration patterns. Hands-on experience with SAP BTP is a plus.