Support Lead

Run SAP security administration for the AMS service by managing access requests, authorization incidents, role maintenance and compliance support in a controlled and auditable manner. SAP user administration, access provisioning/de-provisioning, role assignment, authorization traces, GRC checks, security incidents, audit evidence and routine access support.

Key Responsibilities

Handle SAP access requests, incidents and service requests across the SAP core and related add-ons while meeting agreed SLAs. Create, change and remove user access based on approved workflows, business role mapping and segregation-of-duties requirements. Maintain single, composite and derived roles, organisational levels and authorization values in line with agreed role standards. Perform authorization troubleshooting using SU53, ST01/STAUTHTRACE, user comparison and related tools. Support periodic access reviews, audit evidence collection, user recertification, inactive-user lock/delete controls and licence/user reporting. Execute routine GRC access risk analysis and escalate SoD conflicts or privileged-access exceptions to the SAP Security Engineer or process owner. Support emergency access/firefighter processes, password/user-lock issues and urgent access restoration for critical business processes. Maintain security SOPs, role matrix updates, authorization traceability and knowledge articles for recurring requests. Work with Service Desk/L1.5 teams to shift standard access requests and improve first-time-right assignment. Provide coverage during business hours and support critical P1/P2 escalations where access issues affect operations. Skill Requirements Mendatory Skills SAP user administration SAP role maintenance

SU01/PFCG/SUIM

Authorization tracing SAP GRC access risk analysis SoD awareness Audit evidence preparation ServiceNow ticket handling SLA and control discipline Optional Skills Fiori/Gateway authorizations HR/security integration awareness IAM workflow exposure Automation of standard access requests Licence measurement support

Other Requirements

null