SAP Security Engineer

Role Description:

At Booking.com, data drives our decisions. Technology is at our core. And innovation is everywhere. But our company is more than datasets, and lines of code. We’re the thrill of the first night in a new place, the excitement of the next morning, the friends you make, the journeys you take, the sights you see, and the food you sample. Through our products, partners and people, we can empower everyone to experience the world.

FinTech is a complex, competitive and exciting industry. To accomplish Booking.com’s mission (“making it easier for everyone to experience the world”), we aim to offer frictionless payment experiences to our guests and partners. The FinTech business unit creates best in class payment products that offer choice to guests and help Bookings business partners grow their business.

The Financial Systems team in the FinTech Business unit provides technical expertise to the finance department and is responsible for supporting and innovating SAP S4HANA, SAP HANA DB Solutions, SAP GRC, SAP BTP, SAP SAC and many other connected external systems like Ivalua, Conga or Blackline. We want to change the way people work with enterprise systems, by building an application platform that supports simplification of Business processes and empowers the finance community with better integrations and financial insights.

This is a great opportunity for a SAP Security Engineer; the focus of this role is to implement the technical solutions for the security and compliance of a complex FinTech infrastructure. The SAP Security Engineer will bring expertise and experience with complex SAP security solutions, will be able to provide technical expertise and contribute to the technical strategy of the team.

B. Responsible

Design & Implement Security for SAP S4HANA Private Cloud & Related Products which interacts with SAP S4HANA ensuring SOD Compliance.

Design Security for modules like Record to Report, Order to Cash, Procure to Pay and products like MDG (Master Data Governance), Datasphere, SAC.

Engage with Business Stakeholders & IT Stakeholders to understand Access Requirements & Design Security solutions.

Formulate Business Requirements into a clean Security Design with proper controls at Role level.

Engage with internal Security leadership and Architecture Team to design solutions for new products or services.

Ensure any Risks at User Level or at Role level are discussed in advance and ensure proper Mitigation & Remediations plans are well documented in advance.

Must follow the Internal Guidelines for any User or Role changes so that we remain complaints.

Responsible for creating documentations for Security Solutions.

B. Skilled

Bachelor’s or Master Degree in Computer Science, IT or related Engineering Field.

8+ Years of Experience in SAP Security.

Must have at least 1 SAP Security Deployment Experiences on SAP S/4 HANA Private Cloud Edition or on-prim SAP S/4 HANA 2023 or higher.

Should have worked on Designing Security for Master data/Business Partner and Key RTR Processes,.

Independently work on SAP Security Projects Plan creations with detailed steps of implementations.

Clear Understanding of core SAP Security Knowledge of SU24, SE93, PFCG, SU01, Security Traces, Security Tables. Implemented Authority Checks on Tables & Programs.

Good Understanding of Fiori Page, Space & should be able to investigate Fiori access issues. Should be able to independently design roles using Fiori First Approach.

Exposure of User propagation vs Basic Authentication methodologies and how SAP Security works in each case.

Good Understanding of SAP GRC AC Modules, Specifically ARA, BRM, EAM. Independently able to understand SOD and how risks are defined and how to do user & role level assessments.

Implementation Experience for SAP Business Technology Platform Security with exposure to Cloud Identity Services.

SAP Security Implementation experience for Reporting solutions on platforms like SAC, BTP-Datasphere, HANA Databases.

Good Understanding of key SAP Processes & related authorization design.

Basic understanding of SAP Cyber Practices & tools.

Standard Certifications in SAP Security/CISSP/CEH will be a Bonus.