SAP Security Lead

The SAP Security Lead at e.l.f. Beauty will be responsible for overseeing the security and integrity of the SAP landscape, ensuring compliance with corporate and regulatory standards. This role involves managing user access, designing security roles, monitoring systems for potential risks, and collaborating with cross-functional teams to maintain a secure and compliant SAP environment.

Key Responsibilities:

• User and Role Administration:
• Manage SAP user accounts, roles, and authorizations. Create, modify, and deactivate user accounts according to business and HR requirements.
• Role Design and Maintenance:
• Design, develop, and maintain SAP security roles that align with business processes and compliance needs. Collaborate with business process owners and IT teams for appropriate role assignments.
• Authorization Management:
• Define and manage authorization objects to ensure users have appropriate access. Conduct regular reviews and audits of user authorizations to identify and mitigate risks.
• Security Policy Enforcement:
• Implement and enforce security policies, standards, and procedures based on industry best practices. Partner with compliance teams to ensure alignment with internal and external regulatory requirements.
• Security Monitoring and Incident Response:
• Monitor SAP security logs and alerts to detect anomalies or potential threats. Collaborate with incident response teams to investigate and resolve security breaches or vulnerabilities.
• User Training and Awareness:
• Provide training and guidance to SAP users on security policies and best practices. Promote a strong culture of security awareness across the organization.
• Segregation of Duties (SoD) Analysis:
• Perform SoD analysis to identify conflicts in access rights and collaborate with business stakeholders to mitigate identified risks.
• Emergency Access Management:
• Administer emergency access procedures, ensuring all elevated access is properly logged, monitored, and reviewed.
• Security Documentation and Audit Support:
• Maintain detailed documentation of SAP security configurations, roles, and processes. Support audit and compliance reviews by providing required evidence and reports.

Requirements:

• Bachelor's degree in Information Technology, Computer Science, or a related field.
• Proven experience as an SAP Security Lead or similar role.
• Strong knowledge of SAP security concepts including user management, role design, and authorization administration.
• Deep understanding of SAP GRC (Firefighter/EAM, SoD, Risk Analysis, Access Request).
• Experience with ITGC, SOX, and audit compliance.
• Exposure to cloud integrations (BTP, CPI, IAS/IPS, IBP).
• Familiarity with ServiceNow workflows, ticketing systems, and integrations.
• Understanding of identity management and SSO solutions (Okta, SAML2, etc.).
• Knowledge of data security and privacy regulations.
• Excellent analytical, problem-solving, communication, and interpersonal skills.

Key Skills:

SAP Security, SAP GRC, User Management, Role Design, Authorization Management, ITGC, SOX Compliance, Audit Support, SoD Analysis, Emergency Access Management, Incident Response, Security Monitoring, ServiceNow, Cloud Integrations (BTP/CPI/IAS/IPS/IBP), Okta, SAML2, Data Security,