SAP Security Auditor for Energy Sector

• Professional Experience: Minimum of 6 years of specific experience in SAP security auditing, preferably with previous experience in the energy sector.
• Technical Knowledge: Deep knowledge of SAP security modules (Basis Security), role and authorization management, profiles, authorization objects, and the SAP GRC Access Control tool (or similar).
• Audit Methodologies: Experience in the application of information security audit methodologies and frameworks (e.g., COSO, ISO 27001).
• SoD Analysis: Solid experience in the identification, analysis, and remediation of Segregation of Duties (SoD) conflicts.
• Communication Skills: Excellent verbal and written communication skills in Spanish, with the ability to present findings and recommendations clearly and concisely to different levels of the organization.
• Critical Thinking and Problem Solving: Analytical capacity to identify complex problems and propose effective solutions.
• Education: University degree in Computer Science, Engineering, Mathematics, Business Administration, or similar. Certifications such as CISA, CISSP, or CISM will be highly valued.

• Energy Sector: Experience and knowledge of the operating environments, regulations, and specific risks of the energy sector will be highly valued.

• Stable and Challenging Project: Joining a long-term project in a key sector of the economy.
• Hybrid Model: Flexibility to combine office work with remote work, promoting a balance between personal and professional life.
• Professional Development: Opportunities for growth and continuous learning within a leading consultancy.
• Dynamic Environment: Working in a professional and collaborative team.
• Competitive Compensation: Salary in accordance with the candidate's experience and value.

SAP Security Auditor - Energy Sector

Company: Metrica España

From Métrica Consulting, a leading company in consulting and technology services, we are looking to incorporate into our team an SAP Security Auditor with a solid track record and demonstrated experience in the energy sector. This is a unique opportunity to join a stable and highly relevant project in Madrid, under a hybrid work model.

• Security Risk Assessment: Performing exhaustive analyses to identify, evaluate, and prioritize security risks associated with SAP systems within the context of the energy sector. This involves understanding the specific threats and potential vulnerabilities of critical infrastructures.
• Review of Users, Roles, and Authorizations: Auditing and analyzing user management, role definition, and authorization assignment in SAP systems. The objective is to ensure that access to information and critical functionalities is appropriate and aligns with company policies and security best practices.
• Detection of Segregation of Duties (SoD) Conflicts: Identifying and documenting potential segregation of duties conflicts that could compromise the integrity of business processes and increase the risk of fraud or error. The proposal of solutions and controls to mitigate such conflicts will be required.
• Verification of Compliance with Controls and Policies: Checking the correct implementation and effectiveness of internal and external security controls, as well as compliance with corporate security policies and the sectoral regulations applicable to the energy sector.
• Issuance of Findings and Recommendations: Preparing detailed reports on audit results, including clear findings, impact analysis, and practical, actionable recommendations for the continuous improvement of SAP security and risk mitigation. Effective communication with stakeholders is expected.

Location: Madrid (near San Agustín de Guadalix) - Hybrid

We are pleased to offer a position within a strategic project in the energy sector, where safety and regulatory compliance are fundamental pillars. The work environment is characterized by its dynamism and the demand for high quality standards. The location, near San Agustín de Guadalix, makes work-life balance and access to our facilities easier, combining on-site work with the flexibility of remote work.

As an SAP Security Auditor, your main functions and responsibilities will include:

Residency in Madrid is necessary, as you will need to visit the client several days a week.

Minimum Experience: 6 years

Experience in auditing SAP systems.