SAP Roles & Authorisations Workstream Lead (S/4HANA Public Cloud)

SAP Roles & Authorisations Workstream Lead (S/4HANA Public Cloud) — Contract Exalto Consulting is supporting a confidential SAP cloud programme to appoint an experienced SAP Roles & Authorisations specialist to lead the workstream end-to-end. Find out more about the daily tasks, overall responsibilities, and required experience for this opportunity by scrolling down now. This role is focused on delivery leadership, design governance, quality assurance, and audit-ready documentation. It is not a BAU security operations post and includes a structured handover at contract end. What you'll do Lead the Roles & Authorisations workstream, owning outcomes across the programme Provide day-to-day direction to an offshore delivery team responsible for role build, documentation and test evidence Assess the current role model and access usage, identify key risks, and recommend rationalisation/standardisation Define a target access model across: SAP S/4HANA Public Cloud SuccessFactors EC / EC-P SAP Analytics Cloud (SAC) SAP Datasphere Ensure designs are persona-based, least-privilege by default, and support controlled approvals and auditability Drive the delivery backlog and prioritisation for role builds and access changes Support SIT/UAT readiness by ensuring users/roles are provisioned correctly and validated Run stakeholder workshops and present design decisions/exceptions through governance forums Collaborate with corporate IAM/Active Directory teams (joiner/mover/leaver, groups, SSO concepts) to align SAP roles with wider access controls Key deliverables Workstream plan (milestones, dependencies, RAID) As-is access assessment and risk findings Target role design standards and naming conventions Role mapping matrix (current → target) Role catalogues across the platforms in scope Access validation approach and persona-based test scripts Evidence packs to support sign-off and audit readiness Structured handover into BAU/security operations Experience we're looking for (essential) Proven delivery lead experience for SAP Roles & Authorisations on complex programmes Strong access model design experience for S/4HANA Public Cloud and connected SAP platforms Track record leading offshore-heavy delivery and assuring quality of outputs Strong stakeholder management and workshop facilitation skills Governance mindset: least privilege, documentation discipline, audit readiness xbpsjku Working knowledge of IAM/AD concepts sufficient to collaborate effectively (JML, groups, SSO) Nice to have Experience in regulated environments / public sector Exposure to SoD processes/tooling (working with compliance/GRC) Experience using SAP Cloud ALM for traceability Contract overview Inside IR35 / PAYE Hybrid working (details shared at shortlist stage due to confidentiality) Rate: £655 per day (Inside IR35 / PAYE) Start: ASAP, subject to BPSS screening Duration: until 30/06/2026 (current view) If this aligns with your background, please share your CV and a short summary of your recent Roles & Authorisations delivery (platforms in scope, programme scale, offshore delivery model, and audit/governance approach).