Information Security Analyst (SAP Security & Fiori Authorization)

Quick Facts

• Role: Information Security Analyst (SAP Security & Fiori Authorization)
• Focus: SAP S/4HANA authorization management and SAP Fiori security/role alignment

Description

Design, build, and maintain SAP S/4HANA authorization roles and profiles using PFCG, including single, composite, and derived roles. Configure and secure SAP Fiori Launchpad (catalogs, groups, tiles, and spaces/pages) for both embedded and standalone deployments. Maintain front-end/back-end role synchronization, troubleshoot authorization errors, perform user administration and access reviews, and support SoD remediation and S/4HANA upgrade/migration authorization impact.

Responsibilities

• Build and maintain SAP S/4HANA authorization roles/profiles in PFCG (single/composite/derived)
• Configure Fiori Launchpad security structure (catalogs, groups, spaces/pages, tiles)
• Ensure correct mapping between OData services, ICF nodes, and backend authorization objects
• Perform user administration (creation, role assignment, mass user maintenance)
• Run periodic access reviews and support audit/compliance evidence
• Troubleshoot authorization errors quickly using SAP diagnostic tools
• Support segregation of duties (SoD) analysis and remediation, including risk mitigation and emergency access handling
• Secure Fiori apps (transactional, analytical, factsheet) and coordinate role design with business process needs
• Execute role redesign/cleanup using authorization trace analysis and optimization (SU25)
• Support S/4HANA upgrades/migrations with authorization impact analysis, testing, and remediation
• Respond to SAP security tickets within SLA

Requirements

• 5+ years of hands-on SAP security experience
• Demonstrable experience in SAP S/4HANA security and Fiori/UI5 app authorizations
• Deep knowledge of PFCG role maintenance, authorization objects, SU24 proposal maintenance, and derived/composite roles
• Experience securing Fiori Launchpad for embedded and standalone (SAP BTP) scenarios
• Experience with OData service authorization and Gateway/front-end to back-end role alignment
• Strong troubleshooting using SU53, ST01/STAUTHTRACE, and SU24/SUIM/authorization trace tools
• SoD/risk analysis experience
• Familiarity with SAP Fiori app types (transactional, analytical, factsheet) and authorization requirements
• Experience supporting S/4HANA implementation, upgrade, or migration security work
• Ability to work independently with minimal oversight and deliver hands-on configuration

Benefits

• Day-to-day SAP security ticket ownership within SLA
• Opportunity to contribute to security role redesign/cleanup and S/4HANA upgrade/migration authorization work