Senior Security & Authorization Engineer (SAP S/4 & SAP BTP)

TASKS AND RESPONSIBILITIES

• Design, develop, and maintain authorization concepts and role structures within SAP S/4HANA and SAP BTP, ensuring alignment with business requirements and compliance standards (e.g., GxP, ICS/GISC).
• Lead the end-to-end lifecycle of SAP roles — from requirements gathering and concept design through build, testing, and ongoing maintenance.
• Manage and continuously improve user administration processes and authorization-related procedures within SAP S/4HANA and SAP BTP.
• Collaborate closely with the CORE S/4HANA Program and its Security & Authorization Team to ensure authorization requirements are effectively integrated into program initiatives and release cycles.
• Administer and develop identity management processes using SAP Cloud Identity Services (IAS/IPS), SailPoint IDNOW, and Pathlock Cloud.
• Support compliance & governance activities, including security assessments and audits, with a focus on authorization risks and segregation of duties (SoD).
• Provide expertise and act as a key point of contact for authorization and role design inquiries across IT Operations and business teams.
• Stay current on SAP BTP and S/4HANA authorization best practices, including SAP's embedded AI capabilities, and leverage AI-powered tools (e.g., ChatGPT, Claude, Copilot) to enhance delivery quality and efficiency.

WHO YOU ARE

• Bachelor’s degree in computer science, Information Technology, or related field, or equivalent work experience.
• 8+ years of experience in SAP Security & Authorization, with a strong focus on role design and authorization concept development in SAP S/4HANA and SAP BTP, ideally in a regulated (GxP) environment.
• Deep knowledge of SAP authorization concepts, role design methodologies, and best practices within SAP S/4HANA and SAP BTP.
• Hands-on experience with SAP Cloud Identity Services (IAS/IPS), SailPoint IDNOW, and Pathlock Cloud.
• Understanding compliance frameworks and industry standards (GxP, ICS/GISC, SoD).
• Experience with DevOps and Agile methodologies.
• Comfortable using AI-powered tools (ChatGPT, Claude, Copilot, or similar) as part of your daily workflow.
• Excellent problem-solving and communication skills; experience in international or cross-cultural teams is highly desirable.
• Security certifications (CISSP, CISM, CISA) are a plus.
• Fluent in English (required). Portuguese and German are an additional advantage.

At Bayer we believe in diversity, equity and inclusion. We aim to create an environment in which everybody can feel authentic, respected and equally valued. Every day we strive to reflect our values through our unique capabilities, self-experiences, and aspirations. We intentionally seek diversity, to enable our people to bring their fullest potential out and encourage others to likewise do so. Our company wins when we leverage our capabilities to lead the cultural transformation in our business, positively impacting society.

Candidates who meet the requirements based on the job profile will be considered for employment regardless of physical disability, race, color, religion, sex, age, sexual orientation, gender identity and will not be at a disadvantage if unemployed.