Information Security Analyst (SAP Security & Fiori Authorization)

Quick Facts

• Focus on SAP S/4HANA security, Fiori/UI5 authorization, and access governance
• Own role/profile design, troubleshooting, and audit-ready documentation
• Support SoD analysis and S/4HANA upgrade/migration security impact

Description

Design, build, and maintain SAP S/4HANA authorization roles and profiles using PFCG, including single, composite, and derived roles. Configure and secure Fiori Launchpad (catalogs, groups, tiles, and spaces/pages) for both embedded and standalone Fiori deployments. Ensure secure front-end/back-end synchronization, perform user administration and periodic access reviews, and resolve SAP security tickets within SLA.

Responsibilities

• Maintain SAP S/4HANA authorization roles and profiles (PFCG), including derived/composite role structures
• Configure secure Fiori Launchpad for embedded (S/4HANA) and standalone (SAP BTP) deployments
• Synchronize Fiori Gateway/BTP front-end roles with S/4HANA back-end authorizations using correct OData/ICF-to-backend mappings
• Perform user administration: user creation, role assignment, mass user maintenance, and periodic access reviews
• Troubleshoot authorization errors using SU53, ST01/STAUTHTRACE, and SU24 to resolve missing authorizations quickly
• Support segregation of duties (SoD) analysis and remediation, including risk analysis and mitigation
• Build and maintain security for Fiori app types (transactional, analytical, factsheet) and coordinate with functional teams on role design
• Execute role redesign/cleanup, including authorization object trace analysis and role optimization using SU25 methodology
• Support S/4HANA upgrade and migration projects with authorization impact analysis, testing, and remediation
• Maintain documentation for role matrices, access provisioning procedures, and audit/compliance evidence
• Respond to day-to-day SAP security tickets within SLA

Requirements

• 5+ years of hands-on SAP Security experience, including SAP S/4HANA security and Fiori/UI5 app authorizations
• Deep working knowledge of PFCG role maintenance, authorization objects, SU24 proposal maintenance, and derived/composite roles
• Practical experience securing Fiori Launchpad for both embedded (S/4HANA) and standalone (SAP BTP) scenarios
• Experience with OData service authorization and Gateway front-end to back-end role alignment
• Strong troubleshooting using SU53, STAUTHTRACE/ST01, SUIM, and authorization trace tools
• Experience with SoD/risk analysis
• Familiarity with SAP Fiori app types (transactional, analytical, factsheet) and their authorization requirements
• Experience supporting SAP S/4HANA implementation, upgrade, or migration projects from a security perspective
• Ability to work independently with minimal oversight and deliver hands-on configuration

Benefits

• Hands-on ownership of SAP security role design and operational support within SLA
• Exposure to end-to-end access governance topics (SoD, remediation, audits) and security impact work for S/4HANA transformation projects