SAP Authorization Administrator II at Shoprite Group of Companies

Job Objectives

• To design, build, test and maintain authorisation roles to meet business requirements:
• Design, implement and maintain the provisioning processes and workflows based on the requirements from the Business Owners and Business Process Experts.
• Testing and transport of the processes and workflows to the Access Control production environment.
• Import roles from backend systems and maintain role related information.
• Final gatekeeper for approved requests that contain conflicts.
• Engaging with Business Process Experts to resolve conflicts in requests.
• Exception handling and managing of aged requests.
• Manage Superuser roles and privileges
• Design, implement and maintain the firefighters and the assignment of their relevant roles.
• Testing and transport of the firefighter configuration to the Access Control production environment.
• Initiate firefighter role creation in the underlying SAP systems.
• Design, implement and maintain SAP roles and profiles for the system according to industry best practices and standards (e.g. position based roles).
• Trigger organisational alignment to comply with audit and security requirements.
• To execute the agreed SAP Access Control principles and processes as designed:
• Configuration of the Access Control solution.
• Provide support for Business Process Experts, Business Owners and End Users.
• Monitor the Access Control solution and ensure smooth operation.
• Schedule and monitor background jobs.
• Administer User management for SAP Access Control in the SAP User Management Engine.
• Engage with Business Process Experts to ensure a high quality ruleset.
• To analyse and solve risks related to SAP authorisation:
• Design, implement and maintain the Access Control ruleset, including mitigating controls, based on the requirements from the Business Owners and Business Process Experts.
• Testing and transport of the ruleset to the Access Control production environment.
• Advise developers on proper security mechanisms and controls in SAP processes.
• To design future authorisation concepts for Shoprite:
• Conduct research regarding best practice for authorisation and access control.
• Conduct audit reviews to evaluate Shoprite’s environment.
• Recommend changes to authorisation practices and procedures based on information gathered.
• Implement approved changes and adapt authorisation processes & rulesets in the SAP environment.

Qualifications

• Matric / Grade 12
• Tertiary qualification

Experience

• 4+ Years in Sap Authorization
• GRC Knowledge
• 1 Year in Change Control 
• General IT experience
• Auditing
• Security and governance

Knowledge and Skills

• Auditing
• IT Security
• SAP Security and Authorisations
• Working on Remedy/Helix
• Following change control methodologies