CompliantERP is an Australian specialist consultancy in SAP security, governance, risk and compliance. We advise and deliver services to large enterprise and public sector organisations. We have developed CERPASS, a GRC solution built on SAP BTP.

The opportunity

Enjoy the upcoming Australian summer in Brisbane! We are seeking an accomplished SAP Security, GRC and Identity Architect to join our senior delivery team for an upcoming client project. The assignment is expected to be for 3 months but may lead to additional work.

You must be prepared to work onsite regularly at the client site in Brisbane – candidates seeking a fully remote arrangement will not be considered.

Working alongside our Lead Solution Architect, you will shape security and identity strategy for a complex SAP landscape and contribute directly to design and implementation.

The role requires a senior practitioner who combines architectural judgement with deep technical capability and who is equally credible both advising client leadership and resolving complex configuration issues. You will also bring the experience to lead the delivery of the engagement when required.

Key responsibilities

Architecture and Advisory

• Define target-state Security, GRC and Identity Architectures across SAP S/4HANA (on-premise and SAP Cloud ERP Private), SAP BTP and SAP Business Suite cloud applications.

- Design identity governance and provisioning architectures spanning SAP Cloud Identity Access Governance (IAG), SAP Cloud Identity Services (IAS and IPS) and enterprise platforms such as Microsoft Entra ID,



SailPoint and Saviynt.
- Assess enterprise identity and access management capability.
- Develop multi-year roadmap in consultation with finance, audit and governance stakeholders.
- Advise on the transition from SAP Identity Management (IDM), including migration strategy, retention of identity records and decommissioning.

Technical Delivery

• Configure SAP BTP global accounts, subaccounts, role collections and trust, together with SAP IAS and IPS.
- Design and build S/4HANA back-end and Fiori front-end role models.
- Implement SAP GRC Access Control, including access risk analysis, segregation of duties rule sets, emergency access management, business role management and access request workflows.
- Conduct security assessments and role remediation in preparation for S/4HANA conversion.

Governance and stakeholder engagement

• Provide security design authority over roles and authorisations delivered by implementation partners.
- Serve as a senior point of escalation for complex security and identity matters.
- Facilitate client workshops and present findings, architectures and roadmaps to senior stakeholders and steering committee.

Experience and capabilities

Essential:





• At least 8 years of SAP experience, including significant involvement in Security, GRC and Identity & Access Management projects.
- Security architecture or roles & authorisations leadership on at least one multi-year S/4HANA private cloud transformation, including brownfield conversion, SDT and greenfield deployment.
- Back-end and Fiori front-end role design.
- Implementation of SAP GRC Access Control, including access risk analysis, segregation of duties and emergency access, within a SOX-regulated workplace.
- Hands-on architecture and configuration of SAP BTP, SAP IAS and SAP IPS.
- Proven experience delivering SAP Security or IAM engagements, ideally including SAP IAG, SAP IDM, SailPoint, Saviynt or a similar identity governance platform, within large SAP landscapes subject to SOX or segregation of duties obligations.

Desirable

• S/4HANA in SAP Cloud ERP Private (RISE with SAP), and experience of an S/4HANA 2023 upgrade.
- SAP Build Work Zone, SAP Business Suite cloud applications, familiarity with the SAP GRC on HANA roadmap.
- Experience across multiple identity governance platforms and options analysis for a platform replacement.
- Governance of an implementation partner's security delivery or senior escalation on a live programme.
- SAP certification in Security, GRC or BTP.

All interested Senior SAP Security Consultants are encouraged to apply. Australian residents are preferred but overseas candidates requiring a work visa may be considered.

📌 Senior SAP Security, GRC and IAM Architect (Contract) (Brisbane)
🏢 CompliantERP
📍 Brisbane