Who is ISB Global?
ISB Global was founded in 1999 and is headquartered in London. We have offices in South Africa, Pakistan, and North America, with a great team also working in Portugal. ISB is proud to be very multi-cultural and ‘Global’ in its thinking and approach.
ISB Global currently has currently over 110 team in these respective locations. Predominantly permanent staff, but a range of contractors to support project requirements.
We are passionate about the environment, working to enhance the Circular Economy, and Reduce Green House Gas Emissions.
What do we do?
ISB Global is a software development and consulting house, offering the world’s most advanced Environmental, Waste Management, and Recycling software.
ISB has three key pillars in its business, OutSystems, SAP, and AWS (Amazon Webservices). We are partners, and resellers and offer services in each.
Responsibilities:
Lead the technical delivery of security solution within a SAP S/4HANA project.
Developing and driving the implementation of security best practices and standards
Leadership and Consulting within SAP S4/HANA projects around Security and Controls performing configuration and maintenance of security roles, Perform SAP role design, administration and analysis, including creation of roles, profiles, user IDs and custom authorization objects.
Develops SAP roles and profiles to minimize business risk and ensure clear Segregation of Duties. Understands dependencies and interrelationships between separate functional modules and SAP systems. Provides functional and configuration support in designing SAP authorizations and roles.
Responsible for the ongoing Design of SAP security strategy according to customer requirements and SAP best practices
Design and implement new authorization concepts along with business departments and IT stakeholders
Safeguarding the environment (Single/Composite roles and role derivation), securing custom development transactions, maintaining SU24, understanding critical transactions / objects and design concepts, and incident resolution.
Responsible for SAP security troubleshooting and end user support
Creating the Roles catalogue for the clients’ users
Create training materials and may assist with user orientation and training.
Assist in Fire fighter production fix issues.
Understands the business processes and applies that knowledge to develop SAP access controls and solve user access problems. Participates in user access requirements gathering, blueprinting and documentation.
Participate in internal and external audits, working with audit Develops SAP roles and profiles to minimize business risk and ensure clear Segregation of Duties. Understands dependencies and interrelationships between separate functional modules and SAP systems. Provides functional and configuration support in designing SAP authorizations and roles.
Problem solving in user access provisioning activities.
Analysing and troubleshooting authorization issues
Documentation of (existing) authorization concepts
Support of role testing during implementation phases
Develop and maintain standards and procedures for the SAP Security (Fiori, Application and HANA) and user access controls all SAP instances.
Evaluate business risks associated with security role design, implement appropriate controls to address those risks and provide recommendations on ways to simplify and streamline the security design.
Identify role owners and automate the role and user provisioning processes.
Role Requirements:
Time zone alignment - to cover some if not all the US day
Skills Requirements:
Minimum of 7 years SAP experience
Ideally from a consultancy background
At least one full lifecycle
Has a proactive approach and will participate in activities outside of S&A, has a can-do attitude
Has very good communication skills and has experience in conducting workshops and presenting technical; issues and decisions in an easy-to-understand manner.
Can influence the key decision-makers.
Can prioritize their workload and work with minimum supervision.
Education Requirements:
A Bachelor's Degree or equivalent
Nice to have:
Knowledge of BTP and roles to support Fiori Launchpad
Knowledge of IAS (Identity Authorisation Services) and IDP (Cloud Identity Provisioning) running on BTP
Knowledge of SAML / SSO using Kerberos
S/4 HANA experience ideally Private Cloud Edition