Senior SAP Authorization and Access Governance Consultant (SAP GRC)

Location: Málaga, Spain; work from the Málaga office, hybrid, or fully remote.

Company

hirify.global is an IT services company that builds and supports software development teams for German partners; this role supports C&A’s e-commerce division.

What you will do

• Own end-to-end SAP authorization and access governance across S/4HANA Retail and related SAP applications.
• Advise SAP programs and transformations by translating business and compliance requirements into authorization and access control solutions.
• Define and approve the global authorization concept, design standards, naming conventions, least-privilege principles, and role structures.
• Lead role design, build, remediation, transport, testing, deployment, and lifecycle management across rollout waves.
• Own SAP GRC Access Control processes, including ARA, ARM, BRM, EAM, SoD reviews, and user access reviews.
• Maintain audit-ready controls and documentation, support go-live readiness and hypercare, and build C&A’s operational capability through knowledge transfer and service handover.

Requirements

• At least 7 years of hands-on experience in SAP authorizations and access governance within large, complex, or global SAP landscapes.
• Deep working knowledge of SAP GRC Access Control, including ARA, ARM, BRM, EAM, SoD, user access reviews, workflow configuration, and provisioning integration.
• Authorization design experience in SAP Retail and solid experience with S/4HANA environments.
• Solid understanding of identity lifecycle management, SSO, LDAP or Active Directory integration, and privileged access.
• Experience with internal controls, audit evidence, data protection requirements, control remediation, and regulated or SOX-relevant environments.
• Proven experience with global SAP transformations, template governance, rollout delivery, go-live readiness, hypercare, and transition to operations.
• Strong analytical, stakeholder management, and communication skills, including the ability to make design decisions, challenge exceptions, and engage business owners, IT Security, auditors, and implementation partners.
• Ability to work independently and reliably with a consultative mindset within an established team.
• Fluent English is required.

Nice to have

• German language skills.

Culture & Benefits

• International, multicultural team of IT professionals.
• Flexible choice of office, hybrid, or full-remote work.
• 23 holiday days.
• Private health insurance from the first day.
• Gym sponsorship and English and German language classes.
• Team events including pizza days, summer events, and padel tournaments.