SAP Ariba Security Analyst
Remote
About the Role
We are seeking a skilled SAP Ariba Security Analyst to manage and enhance the security, access controls, and compliance posture of our SAP Ariba environment. This role ensures that procurement processes and sensitive supplier/financial data remain protected, while supporting business teams with secure and compliant system usage.
The ideal candidate has strong experience in SAP Ariba administration, user access governance, and cloud security best practices.
________________________________________
Key Responsibilities
Manage user access, roles, and permissions across SAP Ariba modules (Buying & Invoicing, Sourcing, Contracts, Supplier Management, Ariba Network).
Maintain and enforce Segregation of Duties (SoD), access governance, and compliance controls.
Monitor system activity, audit logs, and security alerts to identify risks or unauthorized access.
Support security configuration including approval workflows, realm settings, and integration security.
Collaborate with IT security teams to align Ariba security with enterprise security policies and frameworks.
Conduct periodic access reviews, certifications, and compliance assessments (SOX, ISO, internal audit).
Assist with supplier onboarding security checks and ensure secure data exchange with the Ariba Network.
Support integration security between Ariba and SAP ECC/S/4HANA via CIG or middleware.
Participate in testing for system updates, patches, and new security features.
Document security procedures, access models, and user guidelines.
Provide training and guidance to business users on secure system usage.
________________________________________
Required Qualifications
Bachelor s degree in Information Security, Information Systems, Business, or related field.
2-6+ years of experience in SAP Ariba with a focus on security, access management, or system administration.
Strong understanding of Ariba role-based permissions, realm administration, and user provisioning.
Experience with SoD controls, compliance frameworks, and audit processes.
Familiarity with SAP ECC/S/4HANA security concepts (roles, authorizations, integration points).
Strong analytical and problem solving skills with attention to detail.
Ability to communicate effectively with technical and non technical stakeholders.
________________________________________
Preferred Qualifications
Experience with SAP Ariba CIG security, API authentication, or SSO (SAML/Okta/Azure AD).
Knowledge of SAP GRC Access Control or similar governance tools.
Understanding of cloud security best practices and data privacy regulations.
SAP Ariba certification or security certification (e.g., Security+, CISM, CISSP) is a plus.