SAP Authorization Consultant

Our client is a trusted partner in the financial-banking sector in Germany, supporting a large-scale IT landscape across thousands of users and critical business applications. The environment is highly regulated, requiring strong governance, security, and operational excellence.

Manage User Lifecycle & Access: Oversee end-to-end user administration (joiner–mover–leaver), including user creation, updates, deactivation, and role assignments, ensuring secure and business-aligned access while removing obsolete permissions.

Process Access Requests & Governance: Handle access requests by validating approvals, ensuring compliance with policies, and delivering timely execution in line with agreed SLAs while collaborating with stakeholders to clarify requirements.

Design & Maintain Roles: Create and maintain single, composite, and derived roles using SAP standard tools (PFCG, SUIM), ensuring consistent, scalable role design aligned with organizational and business needs.

Support Authorization & Issue Resolution: Investigate and resolve authorization issues using tools such as SU53, ST01, and STAUTHTRACE, supporting daily operations and implementing long-term fixes for recurring access problems.

Ensure Compliance & Audit Readiness: Perform Segregation of Duties (SoD) analysis, support GRC controls, and provide documentation, reports, and evidence required for audits, including periodic access reviews and recertifications.

Drive Reporting, Changes & Continuous Improvement: Generate and maintain reports on users, roles, and access distribution, manage authorization changes (testing and transports), and continuously improve role design and access management processes.