Lead - SAP Basis

Role SummaryThe Assistant Manager – SAP Basis & Security is responsible for leading the administration, security, and governance of SAP systems across hybrid (cloud and on-premises) environments. The role ensures system stability, secure access management, compliance with audit requirements, and seamless integration across SAP applications including S/4HANA, BTP, Ariba, SuccessFactors, and MDG.This position combines technical leadership, operational ownership, and governance accountability, aligned with enterprise-scale SAP landscapes and cybersecurity standards. Key Responsibilities1. SAP Basis Administration & OperationsLead SAP system administration for S/4HANA and related platforms, including monitoring, performance tuning, and troubleshootingManage transports, system refreshes, upgrades, patches, and kernel updatesMonitor system health, batch jobs, logs, interfaces, RFCs, and database performanceCoordinate with infrastructure, cloud, and database teams to ensure availability and SLA compliance 2. SAP Security & AuthorizationDesign and maintain SAP roles and authorization structures aligned with least privilege and SoD principlesManage user provisioning, role assignments, and authorization troubleshootingConduct user access reviews, emergency access (firefighter), and remediation activitiesProvide audit evidence, access reports, and compliance documentation 3. SAP GRC & Access GovernanceConfigure and support SAP GRC modules (ARA, ARM, EAM, BRM)Manage SoD rules, risk analysis, mitigation controls, and workflowsSupport SAP IAG for cloud-based access governance across SAP SaaS applicationsLead periodic access certifications and audit remediation activities 4. SAP Cloud Security (BTP, IAS, IPS, Work Zone)Administer SAP BTP subaccounts, role collections, destinations, and trust configurationsConfigure IAS for SSO, identity federation, and authentication policiesManage IPS for user and role provisioning across SAP systemsSupport Work Zone access control and launchpad content configuration 5. SAP Application Security (MDG, Ariba, SuccessFactors)Manage security and access controls across SAP MDG, Ariba, and SuccessFactorsEnsure secure integration between SAP S/4HANA and cloud systemsSupport role design, provisioning, and access troubleshooting for business users 6. Identity & Integration SecurityDesign and implement SSO using SAML 2.0, OAuth, and IAS/IPS integrationManage authentication flows across SAP ecosystem (S/4, BTP, SaaS apps)Troubleshoot federation, certificates, tokens, and login failures 7. Compliance, Audit & OperationsEnsure adherence to internal security policies, audit requirements, and cybersecurity standardsSupport audits with system logs, access controls, and compliance evidenceParticipate in incident, change, and problem management processesPrepare technical documentation and operational procedures Required Skills & ExperienceStrong experience in SAP Basis & Security administrationExpertise in SAP S/4HANA authorization and role designHands-on experience with SAP GRC Access Control and/or SAP IAGExperience in SAP BTP security, IAS, IPS, and SSO configurationsKnowledge of integration security (RFC, OAuth, SAML, certificates)Strong understanding of SoD, audit controls, and compliance frameworksExperience supporting hybrid SAP environments (cloud + on-premise) Preferred QualificationsSAP certifications (Basis, Security, GRC, or BTP)Experience in large-scale SAP transformation programsKnowledge of SAP Cloud ALM or Solution Manager Soft Skills (Assistant Manager Level)Leadership mindset with ability to guide teams and vendorsStrong stakeholder communication (business, cybersecurity, and IT)High ownership and accountability for critical systemsAbility to manage incidents under pressureProactive risk identification and continuous improvement focus EducationBachelor’s degree in IT, Computer Science, Engineering, or related field Experience Required8–10+ years in SAP Basis & SecurityStrong hands-on experience with SAP S/4HANA and SAP cloud securityExperience in GRC/IAG implementation is highly preferred