Administrative support role within MAHLE's Thermal and Fluid Systems unit, assisting the team with various operational tasks and employee interactions.
About the role
- SAP Security & Authorisation consultant required to design Fiori roles and ensure compliance at BAM's UK offices. Requires extensive experience with SAP Security and leadership in complex projects.
Responsibilities
- Establish a Fiori authorisation model including spaces/pages, catalogs, groups (if used), and launchpad roles
- Define SoD control framework and mitigation strategy; embed with Access Control
- Align security with identity lifecycle (joiner/mover/leaver), role provisioning, and access request workflows
- Build and maintain PFCG roles for GUI and Fiori, including authorization field values, org-level derivations, start authorizations, and menu/content design
- Secure Fiori Launchpad content (UI5 apps, OData services, catalogs/tiles/target mappings)
- Create and execute security test plans (unit, functional integration, UAT, negative testing, penetrations of roles)
- Run authorisation trace & troubleshooting (e.g., STAUTHTRACE, ST01, SU53, SUIM) and fix defects
- Prepare cutover access plans (temporary elevated roles, firefighter strategy, emergency access) and hyper care support
- Ensure compliance with audit requirements (SOX/ITGC/etc.), produce evidence packs, and support auditor walkthroughs
- Document standard operating procedures, role build standards, naming conventions, and governance
Requirements
- 8+ years SAP Security & Authorizations experience
- At least one end-to-end S/4HANA transition (brownfield/greenfield or Central Finance)
- Hands-on with: PFCG, SU24/SU25, SU53/SUIM, STAUTHTRACE/ST01, SEGW, SICF, /UI2/, /IWFND/, /IWBEP/*, SPRO security settings
- Strong Fiori knowledge: catalogs, spaces/pages, tiles, target mappings, OData/IWSG, content lifecycle, FLP content manager
- Good understanding of SAP business processes (FI, MM, SD, HR, etc)
- Proven SoD methodology and ruleset tuning
- Deep knowledge of authorization objects for key S/4HANA areas (FI/CO, MM, SD, CPM/PS)
- Excellent documentation, stakeholder engagement, and ability to challenge and defend a security design diplomatically
- Must-have: S/4HANA Fiori security, SU24/SU25, PFCG role design, SoD & GRC AC, STAUCTRACE/SU53/SUIM expertise
Benefits
- Attractive salary
- Significant benefits package
- Contributory pension
- BUPA
- Life assurance
- 26 days holiday (plus bank holidays)
- Gym subsidy
- BAM social club membership
- Many more exciting benefits
Job title
Job type
Experience level
Salary
Not specified
Degree requirement
Location requirements
Senior Security Engineer at PagBank focusing on application security and secure development practices. Responsibilities include testing, vulnerability management, and collaboration with development teams.
Security Software Engineer at a tool - building company automating coding. Focused on shipping secure products covering enterprise security, cloud, and embedded protections.
Senior Product Cyber Security Systems Engineer at Sonova focusing on product security and cyber threats. Collaborating with teams to maintain robust security practices and compliance.
Threat Exposure Oversight Specialist enhancing security risk management in Cyber Defence team. Collaborating across functions to validate and document security controls and risks.
Lead Information Security Analyst driving security improvements and team management at Octopus Energy. Join us in ensuring secure service delivery across our global operations.
Lead Security Engineer at Octopus Energy, ensuring security in digital energy solutions and managing a team. Join us in revolutionizing the renewable energy transition.
Program Manager overseeing global safety, intelligence, and security at Anthropic. Developing policies and coordinating cross - functional initiatives.
CyberSecurity Sales Specialist engaging Fortune 250 clients to drive cybersecurity solutions at HPE. Focusing on enterprise sales, strategic expansion, and leading competitive pursuits in the Northeast - Mid Atlantic region.
Cybersecurity Sales Specialist driving revenue growth for HPE Cybersecurity solutions across mid - to - large enterprise Cloud accounts. Effectively collaborating with cross - functional teams to meet client needs.