Lead SAP IT Security Advisor

The SAP Security Manager role is responsible for managing the SAP security model and its consistent use within FHS. The successful candidate must have experience in SAP security and have a strong customer service focus, experience managing a team and be familiar with FMIS helpdesk operations. Experience in SAP security design, implementation and Human Capital Management (HCM) user provisioning, and knowledge of SAP Governance Risk and Compliance (GRC), Fiori, segregation of duties concepts and sensitive access is required. Experience in performing a Level 1/Level 2 helpdesk support role and the use of Remedy (or a similar ITSM tool) will be highly regarded. SFIA Role Category and Skills Level: Strategy and Architecture - Security and Privacy - Information Security (SCTY) - Level 6. Security Clearance: Minimum NV1 clearance with NV2 preferred. Candidates must be willing and have capacity to commit to an NV2 upgrade if necessary. Note: A merit list may be created from the shortlisted and interviewed candidates based on their performance and DFAT requirements. Key duties and responsibilities Manage the SAP security model, including roles, authorisations, and workload prioritisation. Provide day-to-day SAP security support, including issue resolution and escalation. Design, build, test, and implement security solutions to meet business requirements. Conduct access control reviews, risk assessments, and compliance activities. Investigate and resolve security issues in collaboration with business, application, and technical teams. Manage security-related audit activities and responses. Develop and maintain security policies, processes, and authorisation frameworks. Identify and lead continuous improvement initiatives to strengthen SAP security. Support SAP implementation and enhancement projects with security and authorisation expertise. Provide guidance to the helpdesk team delivering Level 2 SAP Finance support across DFAT. Assist management and project teams with additional priorities as required. Criteria The buyer has specified that each candidate must provide a response to each criterion. Each response is limited to 3000 characters. Essential criteria 1. Demonstrated experience managing SAP security including user access management, role design, HCM user provisioning and authorisation frameworks. 2. Strong knowledge of SAP security design, governance, Segregation of Duties (SoD), risk management, and compliance requirements. 3. Experience supporting SAP ECC 6 environments, system upgrades, and security-related projects. 4. Proven ability to engage with business stakeholders, ICT teams, vendors, and implementation partners to deliver secure and effective outcomes. 5. Strong analytical, problem-solving, and decision-making skills, with the ability to resolve complex security issues and risks. 6. Excellent communication and leadership skills, including experience managing staff, contractors, audits, and continuous improvement initiatives. Desirable criteria 1. Experience with SAP GRC Access Control and Identity Access Governance solutions. 2. Knowledge of Australian Government security policies, governance frameworks, and compliance requirements. 3. Experience supporting large-scale SAP transformation and implementation programs. 4. Understanding of finance business processes and controls within an SAP environment. Opportunity summary Sellers can submit Up to 2 candidates Number of sellers invited Between 5 and 10 Number of candidates submitted Fewer than 10 RFQ closing time 02 Weeks 00 Days 12 Hours Send us feedback About Accessibility Privacy Terms of use Disclaimer and copyright An initiative of the Digital Transformation Agency The Australian Government acknowledges the Traditional Owners of Country throughout Australia and acknowledges their continuing connection to land, waters and community. We pay our respects to the people, the cultures and the Elders past and present. © Commonwealth of Australia