Sr. SAP Security Consultant ( m/f/d )

Location: Poing, Germany, Munich, Germany

Remote Type: Hybrid

Time Type: Full time

Job Description

Avnet Business Services GmbH

Avnet Business Services GmbH is the service provider of the Avnet Group in EMEA, founded in 2020. With its brands EBV Elektronik, Avnet Silica, Avnet Abacus, Avnet Embedded and Farnell, Avnet is one of the world's most successful distributors of semiconductor products and related services. Avnet is also an S&P 500 listed group. Employees in 70 countries set new standards every day in terms of innovation and quality, for which Avnet has been known in the market for 100 years.

SAP Security & GRC Senior Consultant

Principal Responsibilities

• Lead SAP Security strategy, design, implementation, and support across enterprise SAP environments.
• Design and administer security solutions for SAP ECC, SAP S/4HANA, SAP EWM, SAP HR, SAP GTS E4H, SAP Fiori, SAP BDC, and related applications.
• Configure, maintain, and optimize SAP GRC Access Control modules, including Access Risk Analysis (ARA), Emergency Access Management (EAM), and Access Request Management (ARM).
• Design and maintain SAP roles, authorizations, and Segregation of Duties (SoD) controls to support business and compliance requirements.
• Conduct security risk assessments and identify vulnerabilities within SAP applications, processes, and access controls.
• Support governance, risk, and compliance programs, ensuring alignment with SOX, IT General Controls (ITGC), Business Process Controls, and corporate security policies.
• Partner with business stakeholders to analyze, design, and improve SAP business processes and security controls to enhance operational efficiency and compliance.
• Lead security architecture reviews and participate in SAP transformation initiatives, including ECC to S/4HANA migrations and cloud-based SAP solutions.
• Support internal and external audit activities by providing evidence, addressing audit findings, and driving remediation plans.
• Perform access reviews, risk analysis, and control monitoring activities to ensure ongoing compliance.
• Provide technical guidance and consultation on SAP Security, Identity & Access Management, and GRC best practices.
• Collaborate with global teams and stakeholders to deliver SAP security solutions and ensure effective governance across regions.
• Communicate security risks, compliance requirements, and remediation plans to management and project teams.
• Support continuous improvement initiatives and adoption of industry best practices for SAP Security and GRC.
• Mentor junior consultants and contribute to organizational security knowledge and standards.

Job Level Specifications

• Extensive knowledge of SAP Security, SAP GRC, Identity & Access Management, and enterprise security frameworks.
• Demonstrated ability to design solutions for complex security, compliance, and access governance challenges across integrated SAP landscapes.
• Strong understanding of enterprise business processes and their associated security and compliance requirements.
• Ability to work independently while providing strategic recommendations and technical leadership.
• Experience influencing stakeholders and collaborating with business, audit, compliance, and technology teams.
• Strong analytical, problem-solving, and decision-making skills with the ability to balance security requirements and business objectives.
• Ability to lead multiple security initiatives simultaneously and drive successful outcomes in complex environments.

Work Experience

• 10+ years of SAP Security experience in enterprise environments.
• 3+ years of SAP Security and GRC consulting experience, including multiple full-cycle implementations.
• Hands-on experience with SAP ECC and SAP S/4HANA Security design and administration.
• Proven experience supporting global SAP landscapes and compliance programs.

Education and Certifications

• Bachelor's degree in Information Technology, Computer Science, Information Security, Business Information Systems, or a related discipline.
• SAP Security and/or SAP GRC certification preferred.
• Additional certifications in Information Security, Risk Management, Audit, or Compliance are considered advantageous.

Required Skills & Competencies

• SAP Security Administration
• SAP S/4HANA Security
• SAP ECC Security
• SAP GRC Access Control (ARA, EAM, ARM)
• Identity & Access Management (IAM)
• Segregation of Duties (SoD) Analysis
• SAP Fiori Security
• SOX Compliance
• IT General Controls (ITGC)
• Business Process Controls
• Audit and Compliance Management
• Risk Assessment and Remediation
• Security Governance Frameworks
• SAP EWM, HR, GTS E4H Security
• SAP Business Data Cloud (BDC) Security

Preferred Qualifications

• Experience with global SAP security programs and multinational stakeholder engagement.
• Ability to communicate effectively in German and English.
• Experience supporting regulatory compliance, external audits, and enterprise access governance programs.
• Experience with SAP digital transformation and cloud security initiatives.

#LI-AVNET

The above statements are intended to describe the general nature and level of work being performed. They are not intended to be construed as an exhaustive list of all responsibilities, duties, and skills.

Avnet is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against on the basis of disability. If you are interested in applying for employment with Avnet and need special assistance or an accommodation to apply for a posted position contact our Human Resources Service Center in your region: Americas applicants – hrnow@avnet.com, Asia applicants - hrnow.asia@avnet.com, EMEA applicants - hrnow.EMEA@avnet.eu.

Job Applicant EMEA Imprints