We are seeking a detail-oriented IBP Security Consultant with 2 to 4 years of experience in managing security and authorizations within SAP Integrated Business Planning (IBP). The ideal candidate will be responsible for setting up, managing, and maintaining user roles, permissions, and access controls to ensure compliance with organizational policies and data protection standards.
Key Responsibilities:
- Configure and manage IBP user roles and authorizations using SAP Identity and Access Management (IAM) tools.
- Define and implement security policies and procedures for IBP planning areas, data access profiles, and key figures.
- Collaborate with functional and technical teams to align security configurations with business requirements.
- Monitor and audit user access, perform regular security reviews, and resolve authorization issues.
- Ensure compliance with data protection standards, SOX controls, and internal audit requirements.
- Support the onboarding/offboarding process, managing access requests and user provisioning in IBP and connected systems (e.g., SAP S/4HANA, CPI).
- Document role designs, security models, and changes for transparency and traceability.
- Provide support during testing phases and production rollouts to ensure proper access control and issue resolution.
Required Skills & Qualifications:
- 24 years of hands-on experience in SAP IBP Security or related SAP authorization roles.
- Familiarity with SAP Fiori, HANA Cloud Platform, and SAP Cloud Identity Services.
- Understanding of IBP planning areas, attributes, and key figure access.
- Experience with SAP Business Roles, Catalogs, and Groups.
- Strong knowledge of authorization concepts (PFCG roles, Fiori catalogs, OData services).
- Basic understanding of SAP CPI, S/4HANA, and integration touchpoints with IBP.
- Good communication and documentation skills.
Preferred Skills (Good to Have):
- Experience with GRC (Governance, Risk & Compliance) tools.
- Exposure to audit processes and compliance standards (e.g., SOX, GDPR).
- SAP certification in IBP or Security & Authorization.
