SAP Security Consultant

Job Title: SAP Security Consultant Company: OryxAlign Job Category: SAP BASIS Roles & Responsibilities: Overall Purpose The SAP Security Consultant is responsible for managing and optimizing user access within the SAP landscape. This role is responsible for designing and maintaining role\-based access, administering user authorizations, ensuring compliance with security policies, and supporting audit readiness. The successful candidate will collaborate closely with IT teams, business stakeholders, and audit teams to uphold secure, compliant, and efficient access to SAP systems while continuously improving security processes and controls. Key Responsibilities * Design, build, and maintain SAP security roles using the Profile Generator (PFCG), including Single, Composite, and Derived Roles, in line with the principle of least privilege. * Administer SAP users and authorizations using SU01, SU10, and related SAP security tools. * Manage and maintain SU24 authorization proposals and authorization object relationships. * Investigate and resolve authorization issues using SAP tracing tools such as SU53 and ST01\. * Monitor and maintain SAP Security Audit Logs and support system hardening activities. * Implement SAP Security Notes and support security patching requirements. * Manage custom authorization objects and collaborate with ABAP developers to ensure appropriate authorization checks. * Identify, assess, and mitigate Segregation of Duties (SoD) conflicts in collaboration with business stakeholders. * Support compliance requirements including SOX, ITGC, GDPR, and internal security policies. * Support internal and external audits by providing compliance reporting, evidence, and remediation plans. * Collaborate with SAP Basis teams on system\-level security, transport management, and security\-related configurations. * Support SAP implementations, upgrades, conversions, and migration projects. * Produce and maintain security documentation, role design standards, and governance processes. * Provide guidance on SAP security best practices and continuously improve security controls and processes. Required Skills \& Abilities * Extensive experience designing and maintaining SAP Security Roles using PFCG. * Strong understanding of role\-based access control and the principle of least privilege. * Experience with SU24 Authorization Object Check Maintenance. * Experience administering users through SU01, SU10, and managing Dialog, System, Service, and Communication user types. * Familiarity with SAP Security Audit Logs, SAP Security Notes, SU53, and ST01\. * Strong understanding of Segregation of Duties (SoD) principles and risk mitigation practices. * Knowledge of SOX, ITGC, GDPR, and broader compliance frameworks. * Ability to support audit activities and produce compliance reporting. * Excellent communication skills with the ability to explain technical authorization concepts to non\-technical stakeholders and auditors. * Strong collaboration skills when working with SAP Basis teams, ABAP developers, and business stakeholders. * Strong analytical and troubleshooting skills with a methodical approach to problem solving. * Excellent documentation, stakeholder management, and prioritisation skills. Extensive hands\-on experience with: * PFCG Role Design and Maintenance * SU24 Optimization and Authorization Maintenance * SU01 User Maintenance * SU10 Mass User Administration * SU53 and ST01 Troubleshooting * SAP Security Audit Logs * SAP Security Notes Implementation * Experience supporting internal and external audit cycles. * Experience identifying and mitigating Segregation of Duties (SoD) conflicts. * Functional understanding of core SAP business processes including: * Procure\-to\-Pay (P2P) * Order\-to\-Cash (O2C) * Record\-to\-Report (R2R) Work Location: Bellville, Western Cape, South Africa Availability: Full time

Certifications * SAP Certified Technology Associate \- SAP Access Control. * SAP Certified Technology Associate \- System Security with SAP NetWeaver. * SAP Certified Technology Associate \- SAP S/4HANA Security. * SAP Certified Security Administrator. Other Benefits Include * Social events throughout the year * Technology Loans * Wellbeing initiatives * Long Service Leave * Reward and Recognition Awards Key Skills: SAP Basis, Configuration, Transport Management Salary: Not disclosed