(Senior) Consultant - Technology Risk Advisory – SAP Security and Authorizations

Secure the digital core of enterprises through SAP security and authorization management. At Deloitte Switzerland, within the SAP Security team in Technology & Transformation, you will help organisations strengthen their SAP security posture and authorization controls, empowering clients to manage complex security challenges in an increasingly digital and regulated environment.

• Lead SAP security and authorization transformation initiatives.
• Design robust security frameworks and provide expert guidance on managing access controls and security risks within SAP environments, notably SAP S/4HANA implementations.
• Participate in strategic initiatives to help clients assess SAP security risks, define resilient security controls and frameworks, and establish good-practice security processes with long-term compliance roadmaps.
• Design and implement comprehensive SAP security baselines and authorization concepts, including roles and Segregation of Duties rulesets for various SAP systems, such as SAP ECC and S/4HANA.
• Conduct comprehensive SAP security assessments and control testing to ensure ongoing compliance with security standards and internal policies.
• Implement and configure SAP security solutions (e.g. SAP GRC) to address client security challenges.
• Support the delivery of SAP security transformation initiatives, collaborating with clients and internal teams.
• Work with best-in-class AI solutions to deliver value to clients.
• Contribute to the further improvements of innovative AI and automation tools and assets that drive the future of SAP security and authorization transformation.
• Collaborate across multidisciplinary teams to support go-to-market strategies and develop cutting-edge SAP security offerings.

• You are proactive, adaptable, keen to grow, have strong interpersonal and communication skills, and are focused on building good relationships with clients.
• Minimum of 3-5 years of relevant professional experience in SAP Security and Authorizations, including authorization frameworks, role concept and design (attribute-based (ABAC) and role-based access controls (RBAC)), Segregation of Duties, and GRC technologies.
• Hands-on experience with SAP security solutions beyond SAP GRC is a plus.
• Proven expertise in implementing SAP S/4HANA, including business process mapping, technical configuration of authorizations, and Fiori.
• Foundational knowledge of Cyber Security Frameworks and Application Security, with hands-on expertise in managing SAP System Security (e.g. patch and vulnerability management, system parameters, connectivity, technical users, secure code).
• Experience with SAP Security Software and Tools is a plus.
• Fluent in English, with the ability to engage effectively with diverse stakeholders.
• Additional languages, such as German or French, is a plus.
• You understand the operating models to be put into place for efficient day-to-day SAP security processes.
• Experience with near- and off-shore models is a plus.
• Demonstrated experience with artificial intelligence (AI), such as leveraging AI tools or solutions within risk, security, or SAP-related contexts (e.g., AI-driven access control analysis, intelligent risk assessment, automation of security controls).
• Foundational knowledge of SAP BTP (Business Technology Platform) security, including identity and access management (IAM), API security, and secure integration patterns.
• Hands-on experience with SAP BTP is a plus.

• Flexible working arrangements.
• Continuous learning opportunities.
• Comprehensive well-being support.
• Opportunities to make a social impact.

Deloitte is the largest professional services firm in the world, with more than 460,000 employees globally and offices in over 150 countries. In Switzerland, Deloitte provides integrated services in Audit & Assurance, Tax & Legal, Strategy, Risk & Transactions, and Technology & Transformation, serving companies and organisations of all sizes in every industry sector with around 2,500 employees at six locations.

The SAP Security and Authorization team, part of the Controllership & Treasury team within Technology & Transformation, has been one of the fastest-growing teams in Switzerland. The team offers unrivalled career growth and learning opportunities, and successful candidates will help shape the future of application security, develop the market offering, and work closely with world-top organizations on their digital transformation journeys.