Information Security Analyst (SAP Security & Fiori Authorization)

Quick Facts

• Role: Information Security Analyst focused on SAP Security & Fiori authorization

Description

Design, build, and maintain SAP S/4HANA authorization roles and profiles using PFCG, including single, composite, and derived roles. Configure and secure Fiori Launchpad (catalogs, groups, tiles, spaces/pages) for both embedded and standalone deployments, and keep front-end and back-end role synchronization aligned across OData services, ICF nodes, and S/4HANA authorization objects. Troubleshoot authorization errors, conduct access reviews, support SoD/risk analysis remediation, and deliver day-to-day SAP security ticket resolution within SLA.

Responsibilities

• Maintain SAP S/4HANA authorization roles and profiles with PFCG (including derived/composite role structures)
• Configure and secure Fiori Launchpad (catalogs, groups, tiles, spaces/pages) for embedded and standalone scenarios
• Synchronize Fiori Gateway/BTP and S/4HANA role mappings to ensure correct authorization alignment
• Perform user administration (user creation, role assignment, mass user maintenance, periodic access reviews)
• Troubleshoot authorization issues using SU53, ST01/STAUTHTRACE, and SU24
• Support segregation of duties (SoD) analysis and remediation, including risk analysis and emergency access handling
• Build and maintain security for Fiori apps (transactional, analytical, factsheet) and align role design with business processes
• Execute role redesign/cleanup projects using authorization trace analysis and role optimization
• Support S/4HANA upgrade and migration projects with authorization impact analysis, testing, and remediation
• Maintain documentation (role matrices, access provisioning procedures, audit/compliance evidence)
• Resolve SAP security tickets day-to-day within SLA

Requirements

• 5+ years of hands-on SAP Security experience with SAP S/4HANA security and Fiori/UI5 app authorizations
• Deep knowledge of PFCG role maintenance, SU24 proposal maintenance, and derived/composite role structures
• Practical Fiori Launchpad security experience in embedded (S/4HANA) and standalone (SAP BTP) scenarios
• Experience aligning OData service authorization and Gateway front-end to back-end role mapping
• Strong troubleshooting skills using SU53, ST01/STAUTHTRACE, SUIM, and authorization trace tools
• Experience with SoD/risk analysis
• Familiarity with SAP Fiori app types (transactional, analytical, factsheet) and their authorization requirements
• Experience supporting S/4HANA implementation, upgrade, or migration from a security perspective
• Ability to work independently with minimal oversight and deliver hands-on configuration

Benefits

Not specified in the source text.