Security Architect - SAP ERP Transformation

Overview

Key Responsibilities

• Define and maintain ERP security architecture, standards, and security design principles across the SAP landscape.
• Lead Security Impact Assessments, Threat Modelling exercises, and Risk Assessments for SAP S/4HANA, SAP SuccessFactors, SAP Ariba, and related platforms.
• Design and oversee security controls covering application security, database security, network security, Identity & Access Management, and secure system configurations.
• Ensure ERP security capabilities are integrated with Security Operations functions, including monitoring, threat detection, incident response, and SIEM platforms.
• Provide subject matter expertise on SAP Fiori Security, SAP GRC, SAP Identity & Access Management, and SAP Solution Manager.
• Review third-party integrations and SAP ecosystem extensions, ensuring compliance with enterprise security standards.
• Participate in architecture governance forums and design authority reviews, embedding security throughout programme delivery.
• Translate regulatory and compliance requirements, including SOX, GDPR, and ISO 27001, into practical ERP security controls.
• Define and enforce IAM standards, Role-Based Access Control (RBAC), and Segregation of Duties (SoD) frameworks.
• Support internal and external audits, security assessments, and compliance initiatives.
• Partner with programme leadership, business stakeholders, and technology teams to drive security outcomes across the transformation.

Required Experience

• 10+ years of Information Security experience, including 5+ years in Security Architecture roles.
• Strong expertise in SAP Security Architecture
• Proven experience delivering security-by-design within large-scale ERP transformation programmes.
• Deep understanding of IAM, RBAC, Segregation of Duties, SAML, OAuth2, and SAP Single Sign-On solutions.
• Experience integrating SAP security monitoring and logging with enterprise SIEM and Security Operations platforms.
• Strong knowledge of cloud security principles across AWS, Azure, and/or GCP environments.
• Excellent stakeholder management skills with the ability to influence across business and technology functions.
• This is a
• contract role
• based in Dubai.
• If interested in the role, kindly reach out to anushree.singh@alexanderash.com