Job Objectives

To design, build, test and maintain authorisation roles to meet business requirements:
Design, implement and maintain the provisioning processes and workflows based on the requirements from the Business Owners and Business Process Experts.
Testing and transport of the processes and workflows to the Access Control production environment.
Import roles from backend systems and maintain role related information.
Final gatekeeper for approved requests that contain conflicts.
Engaging with Business Process Experts to resolve conflicts in requests.
Exception handling and managing of aged requests.
Manage Superuser roles and privileges
Design, implement and maintain the firefighters and the assignment of their relevant roles.
Testing and transport of the firefighter configuration to the Access Control production environment.
Initiate firefighter role creation in the underlying SAP systems.
Design, implement and maintain SAP roles and profiles for the system according to industry best practices and standards (e.g. position based roles).
Trigger organisational alignment to comply with audit and security requirements.
To execute the agreed SAP Access Control principles and processes as designed:
Configuration of the Access Control solution.
Provide support for Business Process Experts, Business Owners and End Users.
Monitor the Access Control solution and ensure smooth operation.
Schedule and monitor background jobs.
Administer User management for SAP Access Control in the SAP User Management Engine.
Engage with Business Process Experts to ensure a high quality ruleset.
To analyse and solve risks related to SAP authorisation:
Design, implement and maintain the Access Control ruleset, including mitigating controls, based on the requirements from the Business Owners and Business Process Experts.
Testing and transport of the ruleset to the Access Control production environment.
Advise developers on proper security mechanisms and controls in SAP processes.
To design future authorisation concepts for Shoprite:
Conduct research regarding best practice for authorisation and access control.
Conduct audit reviews to evaluate Shoprite’s environment.
Recommend changes to authorisation practices and procedures based on information gathered.
Implement approved changes and adapt authorisation processes & rulesets in the SAP environment.

Qualifications

Matric / Grade 12
Tertiary qualification

Experience

4+ Years in Sap Authorization
GRC Knowledge
1 Year in Change Control 
General IT experience
Auditing
Security and governance

Knowledge and Skills

Auditing
IT Security
SAP Security and Authorisations
Working on Remedy/Helix
Following change control methodologies