Senior SAP GRC & Authorizations Consultant
Full-time
We're rindus, a People company. We love IT professionals and our passion is to help and empower our crew to get the best out of themselves, unfold their full potential, and help them grow.
Because growth is in our mindset, We're doing it since 2017, closely with our German Partners, helping them shape their software development teams.
C&A; is a multinational retail clothing brand, with stores in all Europe. We are currently collaborating with their e-commerce division, with the headquarters in Düsseldorf (Germany) , you will work in a distributed team from our office in Málaga (Spain ) or from home.
Own the end-to-end SAP authorization and access governance scope across S/4HANA Retail and related SAP applications.
Act as a senior advisor for SAP programs and transformations, translating business and compliance requirements into robust authorization and access control solutions.
Define and approve the global authorization concept, design standards, naming conventions, least-privilege principles, and the use of task, business, composite, and country-specific derived roles.
Lead role design, build, remediation, transport, testing, deployment, and lifecycle management across the global template and rollout waves.
Own SAP GRC Access Control processes, including Access Risk Analysis, Access Request Management, Business Role Management, Emergency Access Management, SoD reviews, and user access reviews.
Maintain the SoD ruleset, critical access catalog, organizational rules, mitigating controls, and control ownership in collaboration with Internal Controls and Internal Audit.
Nominate and enable business role owners, approve global and local role builds, and challenge local requirements that deviate from the global template.




Maintain authorization design documentation, role catalogs, decision logs, control evidence, and operating procedures in an audit-ready state.
Support security readiness and go-live sign-off, including user-to-role mapping, open- risk acceptance, cutover access, and hypercare controls.
At least 7 years of hands-on experience in SAP authorizations and access governance within large, complex, or general SAP landscapes.
Deep working knowledge of SAP GRC Access Control, particularly ARA, ARM, BRM, EAM, SoD, user access reviews, workflow configuration, and provisioning integration.
Authorization design experience in SAP Retail, combined with solid experience in S/4HANA environments.
Experience with internal controls, audit evidence, data protection requirements, control remediation, and regulated or SOX-relevant environments.
Proven track record in global SAP transformations, template governance, rollout delivery, go-live readiness, hypercare, and transition to operations.
Strong analytical, stakeholder management, and communication skills, with the confidence to make design decisions, challenge exceptions, and engage business owners, IT Security, auditors, and implementation partners.
Ability to work independently and reliably with a consultative mindset, delivering high-quality results within an established team.
Fluency in English is required; German is an advantage.
Being part of dynamic and highly motivated international multicultural team of skilled professionals.
~ Flexible working model: You can choose the work model that fits your lifestyle (At office,hybrid or full remote)
~23 holiday days.
~ Private health insurance from day 1.
~ English and German language classes.
~ A young and ambitious team that knows when to work but also when to have fun (Pizza day, Summer event, Padel Tournaments, etc).

#

📌 Senior SAP GRC & Authorizations Consultant (Málaga)
🏢 Rindus Technology
📍 Málaga