Key roles and responsibilities
Assess the role design against BPDs and Signavio process flows across all five workstreams, including the global template (master and derived roles, org-level values) for EMEA, North America and APAC.
Define the Pillar A review approach, checklists and severity criteria, and direct the offshore build review of S/4, Fiori, BTP and GRC Access Control.
Author the Pillar A assessment report, with findings and recommendations aligned to SAP recommendations and market best practices.
Skills
S/4HANA authorization concept: single, composite, master and derived roles, org-level fields
Fiori security: catalogs, spaces and pages, apps and OData services
SAP GRC Access Control (ARA, ARM, EAM) design principles
Critical and sensitive access, IT functional and technical roles
Clear technical writing for executive and technical audiences
Minimum experience
10+ years in SAP security, including at least two full-cycle S/4HANA implementations as security lead or architect, and at least one global template rollout across multiple regions.
Fashion or retail SAP experience preferred.
SAP security or GRC certification preferred.
Key result areas (KRAs)
Role design assessment: Clear view of whether role design matches the documented business processes
Global template assessment: Confirmed fitness of the template for EMEA, North America and APAC rollouts
Review method and oversight: Consistent, peer-reviewed output from the offshore build review
Pillar A report: Complete, prioritized report ready for the final readout