Senior SAP Security Expert (M/F/D)
Summary
Lead SAP security strategy, perform offensive red-team exercises, and define security baselines for DHL’s global SAP environments.
- Be a subject matter expert (SME) on Offensive SAP Security – provide guidance and steer for senior Stakeholders, non-technical as well as technical experts.
- Perform SAP Red Team Excercises - conduct offensive technical cybersecurity engagements of varied nature, plan and execute long running SAP security testing operations (simulated cyber attacks) against SAP systems and their operating environment.
- Record Keeping - maintain detailed documentation of all red team activities, findings, recommendations and present reports to senior management and key stakeholders.
- Stay up to date with the latest trends and development in SAP security and cyber-threats.
- Have excellent communication skills – ensure continuous stakeholder management.
- Conduct assessments of SAP environments, identify gaps, vulnerabilities, misconfigurations, and maturity gaps and develop technical security guidance and remediation plans (costs, benefits, risk minimization, etc.).
- Develop and implement the global cyber security roadmap for SAP, considering the business and IT strategy, current and target states and key risks as well as important gaps.
- Define and develop cybersecurity technical standards, security architecture, security requirements as well as configuration baselines for our SAP environment.
- Be a communication master – ensure continuous stakeholder management with business and IT, identify gaps, propose holistic solutions and achieve group-wide endorsement.
- At least 5 years of hands-on experience performing SAP offensive security exercises (red teaming) as well as SAP security assessments e.g. against SAP security baselines and recommendations.
- At least 5 years of SAP security (technical design), SAP controls design, defining SAP standards, authorization concepts, defining SAP security remediation, best practices, baseline configurations, etc.
- Proven experience defining baselines security configurations and designing multiple SAP security projects / solutions for both ECC/R3 and S4/HANA.
- Proven experience defining baselines security using SAP security capabilities (Identity Provisioning, Credential Store, SAP Data Custodian, SAP HANA Security, SAP Access Control, SAP Cloud Identity Service, …).
- Several years’ experience in IT security in multiple domains (IAM, Data Security, Network, …)
- Excellent communication and presentational skills
- Excellent English language skills.
- Advantage – SAP Certified Professional - SAP Enterprise Architect
- Advantage - SAP Certified Associate - Security Administrator / SAP Certified Technology Professional - System Security Architect
- Advantage – experience driving security architecture solutions as a consultant e.g. as an SAP solution architect
- Flexibility: We offer up to 3 days/week of flexible remote work, along with flexible working hours without core hours. The arrangements may vary depending on the task and role.
- Well-Being: Fun, team spirit, and health are crucial factors. Therefore, within the company, we offer a wide range of health and preventive care services, an occupational physician and the FC Deutsche Post. Here, employees engage in sports activities together or exchange ideas.
- Family-friendly: The compatibility of family and work has many facets, such as childcare, care for family members, etc. We support this, for example, through kindergarten places as well as the Betreuungs- und Erholungswerk (support and recreation program).
- Mobility: We move not only letters or parcels but also our employees through offerings such as company bicycles, job tickets and possibly company cars.
- Location: The Post Campus brings together people from more than 60 countries. The Post Tower is easily accessible by car, public transportation and bicycle. To facilitate the workday, the campus offers amenities such as parking spaces, post office, café, canteen and more.
- Onboarding: Individual onboarding, training on the job, networking, a dedicated certified program, etc., lay the foundation for a successful start at DHL Group.
- Development opportunities: We offer numerous development opportunities through a comprehensive training landscape, junior talent programs, coaching etc.
- Social commitment: Through global corporate programs, we improve the educational and career opportunities for young people and engage in disaster management at airports. We also contribute to local environmental protection and aid projects initiated by employees on a voluntary basis.
- What else? Company pension plan, social counseling, inclusion consulting, cleaning service, insurance cooperation, corporate discounts, events, sabbaticals and much more!