Senior SAP GRC & Authorizations Consultant

Full-time

About us

Hey! Get ready to set sails and navigate the rindus wave We’re rindus, a People company. We love IT professionals and our passion is to help and empower our crew to get the best out of themselves, unfold their full potential, and help them grow. Because growth is in our mindset, we're doing it since 2017, closely with our German Partners, helping them shape their software development teams. So far, we have 160+ crew members of 14 different nationalities sailing with us in the open seas. We’re expanding our team and looking for a new rinder to get on board. Are you the next to be reeled in ?

About our partner

On behalf of our partner C&A , we are looking for the best talent to join rindus. C&A is a multinational retail clothing brand, with stores in all Europe. We are currently collaborating with their e-commerce division, with the headquarters in Düsseldorf (Germany) , you will work in a distributed team from our office in Málaga (Spain) or from home.

What you'll be doing

Own the end-to-end SAP authorization and access governance scope across S/4HANA Retail and related SAP applications.
Act as a senior advisor for SAP programs and transformations, translating business and compliance requirements into robust authorization and access control solutions.
Define and approve the global authorization concept, design standards, naming conventions, least-privilege principles, and the use of task, business, composite, and country-specific derived roles.
Lead role design, build, remediation, transport, testing, deployment, and lifecycle management across the global template and rollout waves.
Own SAP GRC Access Control processes, including Access Risk Analysis, Access Request Management, Business Role Management, Emergency Access Management, SoD reviews, and user access reviews.
Maintain the SoD ruleset, critical access catalog, organizational rules, mitigating controls, and control ownership in collaboration with Internal Controls and Internal Audit.
Ensure that emergency access assignments, usage logs, controller reviews, and periodic certifications are completed and documented in accordance with policy.
Nominate and enable business role owners, approve global and local role builds, and challenge local requirements that deviate from the global template.
Maintain authorization design documentation, role catalogs, decision logs, control evidence, and operating procedures in an audit-ready state.
Support security readiness and go-live sign-off, including user-to-role mapping, open- risk acceptance, cutover access, and hypercare controls.
Build C&A’s operational capability and manage knowledge transfer, operating model definition, and the handover of Security & GRC services during the pilot.

What you'll bring

At least 7 years of hands-on experience in SAP authorizations and access governance within large, complex, or global SAP landscapes.
Deep working knowledge of SAP GRC Access Control, particularly ARA, ARM, BRM, EAM, SoD, user access reviews, workflow configuration, and provisioning integration.
Authorization design experience in SAP Retail, combined with solid experience in S/4HANA environments.
Solid understanding of identity lifecycle management, SSO, LDAP or Active Directory integration, privileged access.
Experience with internal controls, audit evidence, data protection requirements, control remediation, and regulated or SOX-relevant environments.
Proven track record in global SAP transformations, template governance, rollout delivery, go-live readiness, hypercare, and transition to operations.
Strong analytical, stakeholder management, and communication skills, with the confidence to make design decisions, challenge exceptions, and engage business owners, IT Security, auditors, and implementation partners.
Ability to work independently and reliably with a consultative mindset, delivering high-quality results within an established team.
Fluency in English is required; German is an advantage.

What we offer

Being part of dynamic and highly motivated international multicultural team of skilled professionals.
Flexible working model: You can choose the work model that fits your lifestyle (At office, hybrid or full remote)
23 holiday days.
Private health insurance from day 1.
Gym Sponsorship.
English and German language classes.
A young and ambitious team that knows when to work but also when to have fun (Pizza day, Summer event, Padel Tournaments, etc).

#J-18808-Ljbffr

rindus Technology S.L