Expert SAP Technical Security

About the role

The Expert SAP Technical Security will lead the design, governance and administration of SAP technical security for OQ in Muscat. The role ensures the confidentiality, integrity and availability of SAP systems, provides expert support for SAP GRC, and advises business and technical teams on best‑practice security models.

Key responsibilities

• Develop and maintain SAP security policies, standards and guidelines aligned with regulatory and corporate requirements.
• Design and implement role‑based access control (RBAC), authorization concepts and segregation of duties (SoD) frameworks.
• Architect SAP security solutions for S/4HANA, BW/BI, SCM, BTP and Business Objects.
• Provide operational support for SAP production security incidents, role design, authorization errors and user administration.
• Manage user provisioning, role assignments and access requests using SAP IDM, SAP Access Control (GRC) and related IAM tools.
• Conduct periodic user access reviews, certifications and compliance assessments.
• Collaborate with Cybersecurity/SOC to review SIEM alerts, security events and audit logs.
• Investigate security incidents, perform root‑cause analysis and coordinate remediation.
• Perform regular security audits, assessments and prepare documentation for internal and external audits.

Required profile

• Proven experience in SAP security administration and governance.
• Strong knowledge of SAP GRC suite, SAP IDM and IAM processes.
• Experience designing RBAC, SoD and access‑control frameworks.
• Ability to work with business users to balance security and operational needs.
• Familiarity with security incident handling and audit preparation.

Required skills

• SAP S/4HANA security
• SAP BW/BI security
• SAP SCM security
• SAP Business Technology Platform (BTP)
• Business Objects security
• SAP Identity Management (IDM)
• SAP Access Control (GRC)
• Role‑based access control (RBAC)
• Segregation of duties (SoD) concepts
• IAM tools
• Security Information and Event Management (SIEM)
• Security incident investigation
• Audit log analysis