Manager - Technology Risk Advisory – SAP Security and Authorizations

Secure the digital core of enterprises through SAP security and authorization management. At Deloitte Switzerland, within the SAP Security team in Technology & Transformation, you will play a pivotal role in helping organisations strengthen their SAP security posture and authorization controls. Your expertise will empower clients to manage complex security challenges in an increasingly digital and regulated environment, ensuring compliance, operational excellence, and resilience.

• Lead SAP security and authorization transformation initiatives, design robust security frameworks, and provide expert guidance on managing access controls and security risks within SAP environments, notably SAP S/4HANA implementations.
• Manage the delivery of projects, actively engaging with clients and overlooking quality and performance of teams.
• Drive growth by expanding the SAP Security offering and on-boarding high-value clients.
• Lead strategic initiatives to help clients assess SAP security risks, define resilient security controls and frameworks, and establish good-practice security processes with long-term compliance roadmaps.
• Design comprehensive SAP security baselines and authorization concepts, including roles and Segregation of Duties rulesets for various SAP systems, such as SAP ECC and S/4HANA.
• Conduct comprehensive SAP security assessments and implement SAP cyber security controls aligned with industry frameworks (e.g. NIST Cybersecurity Framework, ISO 27001, CIS Controls).
• Implement solutions (e.g. SAP GRC, SAP Ariba, etc.) that optimize processes and deliver innovative solutions to complex SAP security challenges at clients.
• Work with best-in-class AI solutions to deliver value to clients.
• Contribute to the further improvements of innovative AI and automation tools and assets that drive the future of SAP security and authorization transformation.
• Collaborate across multidisciplinary teams to support go-to-market strategies and develop cutting-edge SAP security offerings.

• You are proactive, adaptable, keen to grow and have strong interpersonal and communication skills, focused on building outstanding relationships with clients.
• You are able to manage end-to-end sales processes / “RFP” related dynamics for medium/high complexity clients.
• Experience in a leading Consulting firm will be considered a plus.
• Minimum of 5 years of relevant professional experience in SAP Security and Authorizations, including authorization frameworks, role concept and design (attribute-based (ABAC) and role-based access controls (RBAC)), Segregation of Duties, and GRC technologies.
• Hands-on experience with SAP security solutions beyond SAP GRC is a plus.
• Proven expertise in implementing SAP S/4HANA, including business process mapping, technical configuration of authorizations, and Fiori.
• Proven experience in Cyber Security Frameworks and Application Security, with hands-on expertise in managing SAP System Security (e.g. patch and vulnerability management, system parameters, connectivity, technical users, secure code etc).
• Experience with SAP Security Software and Tools is a plus.
• Fluent in English, with the ability to engage effectively with diverse stakeholders.
• Additional languages, such as German or French, is a plus.
• Relevant certifications: CISM, SAP Certifications, CISSP, CISA.
• Experience with SAP BTP (Business Technology Platform) security, including identity and access management (IAM), API security, secure integration patterns, and cloud-native security controls.
• Knowledge of SAP BTP security best practices and threat modelling is a plus.
• You understand the operating models to be put into place for efficient day-to-day SAP security processes.
• Experience with near- and off-shore models is a plus.
• Demonstrated experience with artificial intelligence (AI), such as leveraging AI tools or solutions within risk, security, or SAP-related contexts (e.g., AI-driven access control analysis, intelligent risk assessment, automation of security controls).
• Coaching, team management and problem resolution skills are part of your strengths.

• Flexible working arrangements.
• Continuous learning opportunities.
• Comprehensive well-being support.
• Opportunities to make a social impact.

Deloitte is the largest professional services firm in the world, with offices in more than 150 countries and more than 460,000 employees globally. In Switzerland, Deloitte provides integrated services in Audit & Assurance, Tax & Legal, Strategy, Risk & Transactions, and Technology & Transformation, serving companies and organisations of all sizes in every industry sector with around 2,500 employees at six locations.

The SAP Security and Authorization team, part of the Controllership & Treasury team within Technology & Transformation, has been one of the fastest-growing teams in Switzerland over the last years. Successful candidates will have the opportunity to help shape the future of application security, develop the market offering, and work closely with world-top organizations on their digital transformation journeys.