# SAP Security Architect

**Company**: Ford
**Location**: Naucalpan de Juarez, MEX
**Work arrangement**: hybrid
**Experience**: senior
**Job type**: full-time
**Category**: IT
**Industry**: Automotive

**Apply**: https://efds.fa.em5.oraclecloud.com/hcmUI/CandidateExperience/en/sites/CX_1/job/68226?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_7dadc63f-612

## Description

We are seeking a highly skilled and experienced SAP Security Architect to drive the development and implementation of Security roles for various modules in S/4 HANA.

As a key member of the Ford SAP Platform Services Security & Controls, you can add critical value to the entire organization.

Responsibilities:

- Design, develop, and implement S/4 HANA Fiori Security roles for various functional areas like General Ledger, Accounts Payable, Accounts Receivable, Asset Accounting.

- Support SAP Role administration including configuration of new authorization objects, Master/Derived Roles, Single and Composite roles.

- Troubleshoot authorization issues by using STAUTHTRACE, STUSERTRACE, SU53, and ST01.

- Implement and support SAP GRC (Governance Risk & Compliance) Access Controls 12.0 including ARA, ARM, EAM, and BRM.

- Administer SAP GRC configuration, rule sets, workflows, and approvers for user provisioning, emergency access, and access recertification.

- Maintain GRC master data, run risk analysis, audit, and compliance support activities.

- Build and maintain MSMP Workflows and configure GRC notifications.

- Build rulesets, create custom functions and risks, and adjust existing rulesets according to business needs.

- Plan and execute GRC Upgrade activities.

- Set up and support Sync jobs (Repository, Auth, FF Log, Action Usage).

- Troubleshoot day-to-day Access request-related issues by analyzing audit logs.

- Work closely with Application security team members and support all security work.

- Provide Production Support on a periodic 24x7 support with on-call responsibilities.

Qualifications:

- A degree in Computer Science, Electrical & Electronics engineering, or a closely related discipline.

- Minimum of 12 years of SAP Security experience with at least two full-life cycle implementations.

- Experience in designing, developing, and testing S/4 HANA Security Fiori Roles with Pages & Spaces.

- Experience in security checks on backend S/4 and Front-end Fiori apps to add OData services and related authorizations for end-users.

- Experience in setting up and configuring SAP GRC modules (Access Control, Process Control).

- Experience with troubleshooting workflow issues in GRC User provisioning.

- Experience in SAP BTP, IAG is a plus.

## Skills

### Required
- SAP Security
- S/4 HANA
- GRC
- Fiori Roles
- Authorization Objects
- Troubleshooting

### Nice to have
- SAP BTP
- IAG

---

Source: [Apply at efds.fa.em5.oraclecloud.com](https://efds.fa.em5.oraclecloud.com/hcmUI/CandidateExperience/en/sites/CX_1/job/68226?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)