Principal SAP Security Specialist

Please note this is an OD vacancy and only impacted colleagues who are at risk or placed in a pool will be considered for this role. If you are at risk or in a pool, you will be asked to confirm this in the application process. 

Applications from candidates who are not at risk or in a pool will be declined at this stage. The role may be re-advertised in future as a standard vacancy open to all internal candidates. 

Role title: Principal SAP Security Specialist

Function: Digital Technology & Data 

Reports to: TBC  

Number of reports: TBC 

Work level: WL4

Role Summary

To lead the strategy, governance and continuous improvement of SAP security, GRC and IT controls across Co-op’s SAP estate, making sure our roles, access, controls and compliance framework are robust, scalable and fit for the way the business operates.

Key Responsibilities

• Strong experience leading SAP security, GRC and IT controls in complex enterprise environments 
• Proven people leadership capability, with experience coaching, developing and setting direction for specialist teams 
• Deep knowledge of SAP authorisation concepts and RBAC design, including large-scale role transformation 
• Strong technical expertise in SAP GRC, including Access Control, Risk Analysis, ARA and ARM across ECC and S/4, including Fiori 
• Extensive experience of SAP ITGC frameworks, control design, monitoring and audit engagement 
• Experience defining and operating enterprise-wide SAP controls strategies and governance models 
• Strong understanding of business process design and how it links to access, controls and compliance 
• Excellent stakeholder management skills, with the ability to influence at senior and executive level 
• A continuous improvement mindset, with a focus on simplification, automation and scalability 

Knowledge, Skills, Experience

• Strong experience leading SAP security, GRC and IT controls in complex enterprise environments 
• Proven people leadership capability, with experience coaching, developing and setting direction for specialist teams 
• Deep knowledge of SAP authorisation concepts and RBAC design, including large-scale role transformation 
• Strong technical expertise in SAP GRC, including Access Control, Risk Analysis, ARA and ARM across ECC and S/4, including Fiori 
• Extensive experience of SAP ITGC frameworks, control design, monitoring and audit engagement 
• Experience defining and operating enterprise-wide SAP controls strategies and governance models 
• Strong understanding of business process design and how it links to access, controls and compliance 
• Excellent stakeholder management skills, with the ability to influence at senior and executive level 

• A continuous improvement mindset, with a focus on simplification, automation and scalability 

We know that some candidates are less likely to apply for a role if they don't meet all the criteria in the job description. At Co-op, where committed to building a diverse and inclusive working environment, so if you’d like to apply for this role but your experience doesn't quite meet every point, we'd still encourage you to apply. You may be just the right candidate for the job or other roles we have available.