SAP HANA Application Security Consultant (Fiori)

SAP Application Security Consultant (Fiori)Location: Remote and travel to London required (2 days per week in office flexible)Role Overview:We are seeking a specialist SAP Application Security Consultant to embed within a high-profile UK Government SAP S/4HANA programme. The role will deliver a robust, compliant, and well-governed SAP security model aligned to Government security standards and best practice.Key Responsibilities:

• Design and implement end-to-end SAP security across SAP S/4HANA, including SAP GUI and SAP Fiori environments.
• Develop and maintain SAP role concepts, authorisation objects, and access control models.
• Perform Segregation of Duties (SoD) analysis and remediation, ensuring compliance with audit and control requirements.
• Design and manage SAP Fiori security, including business catalogues, business groups, and Fiori Launchpad authorisations.
• Integrate SAP security with Identity and Access Management (IAM) solutions and Single Sign-On (SSO) frameworks.
• Support security audits, compliance checks, penetration testing, and risk remediation activities.
• Produce and maintain comprehensive SAP security documentation including role matrices, SoD rulesets, and access policies.
• Ensure alignment with Government Security Classifications, Cabinet Office guidance, and programme security policy.
• Provide security-by-design guidance to functional and technical teams throughout the delivery lifecycle.
• Act as the point of escalation for SAP security incidents, access issues, and role design queries.

Essential Skills and Experience:

• Strong hands-on experience as an SAP Application Security Consultant on SAP S/4HANA programmes.
• In-depth knowledge of SAP authorisation concepts, role design, and access governance.
• Proven experience with SAP Fiori and Fiori Launchpad security models.
• Experience conducting Segregation of Duties (SoD) analysis and remediation.
• Experience integrating SAP security with IAM and SSO solutions.
• Strong documentation skills with experience producing security design artefacts.
• Experience supporting audit, compliance, and penetration testing activities.
• Excellent stakeholder management and communication skills.

Desirable Experience:

• Experience with SAP GRC Access Control or similar GRC tools.
• Working knowledge of NCSC guidance for enterprise and application security.
• Experience delivering SAP security within UK Government or highly regulated environments.

Security and Eligibility Requirements:

• Security Check (SC) clearance is required; active SC clearance is highly desirable.
• Candidates must be eligible to obtain SC clearance as a minimum.
• Applicants must have the right to work in the United Kingdom.
• Successful candidates must consent to UK Government pre-employment and security vetting.

Hays Specialist Recruitment Limited acts as an employment agency for permanent recruitment and employment business for the supply of temporary workers. By applying for this job you accept the T&C's, Privacy Policy and Disclaimers which can be found at hays.co.uk