Job Summary
We are seeking an experienced SAP Cyber Security & Onapsis Consultant with strong expertise in implementing, configuring, optimizing, and supporting the complete Onapsis platform across SAP On-Premise, SAP Business Technology Platform (BTP), and SAP SaaS solutions.
The successful candidate should be able to perform security assessments, baseline and re-baseline activities, vulnerability management, compliance monitoring, and operational support for Onapsis solutions within a complex SAP landscape.
The consultant will work closely with SAP Basis, Security, Infrastructure, Cloud, and Application teams to strengthen SAP cybersecurity posture and ensure continuous monitoring and protection of critical SAP assets.
Key Responsibilities
Onapsis Implementation & Administration
- Lead end-to-end implementation of all applicable Onapsis modules across enterprise SAP environments.
- Design, install, configure, and maintain Onapsis solutions for:
- SAP ECC
- SAP S/4HANA
- SAP BW/4HANA
- SAP Solution Manager
- SAP GRC
- SAP BTP
- SAP Ariba
- SAP SuccessFactors
- SAP Concur
- SAP Integrated Business Planning (IBP)
- Other SAP SaaS platforms
- Integrate Onapsis with enterprise security tools including SIEM, vulnerability management, ticketing, and monitoring platforms.
- Develop technical architecture and deployment strategies for SAP cybersecurity initiatives.
Security Assessment & Vulnerability Management
- Perform SAP security assessments and identify vulnerabilities across SAP systems.
- Conduct baseline and re-baseline security scans for SAP landscapes.
- Analyze findings and recommend remediation approaches.
- Coordinate patch validation, risk assessment, and mitigation activities.
- Support SAP Security Notes review and remediation programs.
SAP BTP & Cloud Security
- Implement and monitor security controls for SAP BTP environments.
- Assess cloud integrations and APIs for security risks.
- Implement security best practices for hybrid SAP architectures.
- Support SAP SaaS security posture assessments and monitoring.
Compliance & Governance
- Establish and maintain SAP cybersecurity baselines.
- Support regulatory and audit requirements including:
- SOX
- ISO 27001
- NIST
- CIS Controls
- Internal compliance frameworks
- Create and maintain security standards, procedures, and operational runbooks.
BAU (Business As Usual) Support
- Provide Level 2 and Level 3 support for Onapsis-related incidents and service requests.
- Troubleshoot security alerts, system connectivity, scan failures, and performance issues.
- Manage daily monitoring and operational health checks of Onapsis platforms.
- Support upgrades, patching, and platform maintenance activities.
- Participate in on-call support and critical incident management when required.
Reporting & Stakeholder Management
- Prepare executive and technical security reports.
- Present security findings, risk assessments, and remediation recommendations to stakeholders.
- Work with SAP Basis, Security, Infrastructure, Audit, and Compliance teams to drive issue resolution.
Skill Requirements
Mandatory
- 5+ years of SAP Security and Cyber Security experience.
- 3+ years of hands-on experience with Onapsis solutions.
- Strong understanding of SAP architecture, including:
- SAP ECC
- SAP S/4HANA
- SAP NetWeaver
- SAP HANA
- SAP BTP
- Experience implementing and supporting multiple Onapsis modules.
- Experience performing SAP security assessments and vulnerability remediation.
- Strong knowledge of SAP authorization concepts and security controls.
- Hands-on experience with baseline and re-baseline security assessments.
- Experience integrating security monitoring tools with SIEM platforms.
- Strong troubleshooting and analytical skills.
Preferred
- Experience with:
- Onapsis Control
- Onapsis Assess
- Onapsis Defend
- Onapsis Security Platform
- Knowledge of SAP Cloud Security and SaaS security controls.
- Understanding of security standards and compliance frameworks.
- Experience working in large enterprise SAP environments.