SAP User & Role Management (m/f/d)

Home of IT: REWE digital Spain

We are the home for techies all around the our tech we combine IT and non-IT specialists from a wide range of fields. Together we bring innovations to life - for retail to enhance the everyday lives of millions of people.

REWE digital Spain belongs to REWE Group one of the leading trade and tourism groups in Germany and Europe with around 440000 employees. In REWE digital overall there are over 2300 IT specialists who set standards for IT implementation in the retail industry and development of new technologies for the sector.

REWE digital Spain is located in the Technological Park of Andalusia (PTA) in Malaga. As a team of more than 60 colleagues we drive innovation for REWE digital in Germany.

The URM Product which is responsible for role management for all SAP applications is looking for someone with strong analytical skills and in-depth security knowledge to shape our SAP authorization environment: from GRC standards and SoD controls to HANA and Fiori authorizations. You combine your technical knowledge with regulatory compliance security and translate business requirements into stable audit-proof solutions taking risks into account.

What you will do:

• SAP GRC Access Control (AC): Design operation and further development of ARA analyses & rulesets EAM/Firefighter processes including logging/review ARM workflows and (if used) BRM catalogues; Definition & maintenance of SoD rules and control points.

  Authorisations Fiori and ABAP authorisations: Architecture & maintenance of PFCG roles for Fiori (spaces/pages catalogues OData services SICF) transaction/object authorisations reference and technical users; quality assurance (role tests evidence).

  SAP HANA security: Design and administration of HANA roles and privileges (system/object/schema/analytic) HDI context authorisation checks and recertifications; close coupling to GRC controls.

  IKS & Audits: Evidence management (ITGC A1/A3 audits) recertifications/UAR evidence-based processes risk and measure documentation.

  Change & Automation: Integration into ALM/ChaRM processes maintenance of ticket/workflow routes continuous improvement (automation templates standardisation).

  Advisory & collaboration: Sparring for specialist areas/role owners clear separation of functions (four-eyes principle) knowledge transfer within the team.

What you will bring:

• Very good understanding of security principles (least privilege SoD risk-based approach) and compliance/ICS in the SAP environment.
• Practical experience in SAP GRC AC (at least ARA EAM/Firefighter; ideally ARM/BRM) including ruleset maintenance and SoD simulation.
• In-depth experience in Fiori authorisations (spaces/pages catalogues OData) and PFCG role design.
• In-depth knowledge of SAP HANA authorisations (roles privileges HDI) and confident SQL reading skills for analyses.
• Strong analytical skills structured documentation communication in German and English.

• Your availability to travel to Germany on a more or less regular basis

• Willingness to be regularly present in the Malaga office and if necessary relocate to Andalusia

What we Offer:

• A startup-like culture with fascinating opportunities combined with the security of being part of a major corporate force in the REWE Group
• Challenging tasks but also a tech playground
• Work in a modern office fostering creativity collaboration and agility
• A flexible autonomous work environment where your ideas will contribute to our collective success
• Open communication culture in an international environment with steady growth and more to come!

Our Benefits:

• Hybrid work and flexible working time
• Company conditions for private medical insurance
• Ticket Restaurant
• Professional development opportunities: English/German courses and further IT education/trainings
• Day off on your Birthday
• 25 days paid vacation
  

What are you waiting for Our expansion in Spain is an invitation for you to shape the future formillions of customers every day. Join us as we pioneer nearshore activities and write the next chapter of our digital conquest. Ready to redefine digital retail Vámonos!

Apply now in English with your salary expectations.

Every person is different. We appreciate that. We appreciate and embrace all aspects of diversity anddifferentness in technology and tools languages and software cooperation and collaboration.