وصف الوظيفة
Role Overview
SAP IAM Contractor position with Chalhoub Group, based in Dubai, for a 6-month contract within the ERP Transform division.
Company Overview
Chalhoub Group is a luxury retail group operating across the Middle East and LATAM with over 16,000 talented professionals across eight countries. The Group operates over 950 stores, online platforms, and mobile apps, managing a portfolio of over 10 owned brands and over 400 international names across luxury fashion, beauty, jewellery, watches, eyewear, and art de vivre categories. The Group is committed to innovation, sustainability, diversity, equity, and inclusion, and is a member of the United Nations Global Compact.
Role Purpose
Provide Security and Identity Access Management expertise to support SAP role and authorization design, governance, risk and compliance initiatives, and identity lifecycle automation across the Group's SAP landscape.
Key Responsibilities
Role and Authorization Design
- Deliver strong expertise in SAP role and authorization design across SAP S/4HANA, SAP SuccessFactors, SAP BW/4HANA, SAP Analytics Cloud, SAP Datasphere, SAP Ariba, SAP CAR, and SAP BTP.
- Lead enterprise-scale role design, role remediation, role rationalization, and role governance programs.
- Support HR-driven Joiner, Mover, Leaver processes and identity lifecycle automation.
- Establish and maintain identity lifecycle automation across SAP and non-SAP systems.
Identity and Access Management
- Deliver hands-on implementation and support for SAP IAG (Identity Access Governance), SAP IAS (Identity Authentication Service), and SAP IPS (Identity Provisioning Service).
- Facilitate integration of SAP IAM components with SAP and non-SAP systems.
- Operate Joule for IAG across governance activities.
- Provide broader security knowledge across SAP systems as required.
Governance, Risk and Compliance
- Demonstrate strong knowledge of Segregation of Duties (SoD) concepts, SAP IAG Access Analysis, and SoD risk management.
- Design and maintain technical SoD rulesets.
- Analyze SoD violations and propose practical risk remediation and mitigation control designs.
- Support access governance, firefighter and Privileged Access Management (PAM) processes, access certification, and audit requirements.
Data Quality and Analysis
- Deliver advanced Excel and data analysis skills to validate role and user datasets.
- Identify inconsistencies, errors, duplicates, and data quality issues in large datasets.
- Challenge assumptions and ensure integrity of role design and access governance deliverables.
- Plan and define action items based on objectives to be achieved.
Stakeholder Management
- Explain complex IAM and security concepts in business-friendly language to business and IT teams.
- Work effectively with internal and external business and IT teams.
- Deliver strong documentation of designs, decisions, and processes.
- Drive activities independently across multiple parallel workstreams with limited supervision.
Qualifications & Experience
- Strong hands-on experience with SAP IAG, SAP IAS, and SAP IPS.
- Experience in enterprise-scale role design and role governance programs.
- Retail industry work experience is good to have.
- Experience with SAP RISE environments is preferred.
- Implementation experience with SAP IAG and hybrid landscape is preferred.
- Experience supporting large-scale SAP transformation programs is preferred.
- Experience operating in regulated or audit-driven environments is preferred.
- Experience supporting go-live, hypercare, and production stabilization activities is preferred.
Skills & Competencies
- Advanced Excel and data analysis skills.
- Strong attention to detail.
- Technical knowledge of SoD concepts and risk management.
- Ability to work independently and proactively.
- Strong documentation skills.
- Ability to communicate complex concepts in business-friendly language.
Additional Information
- Contract duration: 6 months.
- Location: Dubai.
- Immediate availability required.
- Must be currently based in Dubai.