SAP Authorization Manager

To manage and maintain the Delegation of Authority (DoA) across the organization, ensuring alignment between business processes, access controls, and governance policies. The role ensures that operational authorities are designed, assigned, and monitored effectively to support secure, compliant, and efficient business operations. Support the design, review, and enhancement of Delegation of Authority frameworks in coordination with relevant stakeholders. Coordinate and follow up on DoA approvals, updates, and implementation to ensure effective governance and accountability. Serve as the primary point of contact for end-user inquiries related to delegated authorities within the assigned business scope. Analyze existing and new business processes to define and align appropriate authorization and approval requirements. Develop, maintain, and update operational authority matrices aligned with approved processes, procedures, and coding structures. Ensure delegated authorities and access permissions are clearly defined, accurately assigned, and controlled in line with approved delegations. Review and assess risks associated with authorization design, access permissions, and the effectiveness of Delegation of Authority controls. Implement and monitor control measures to mitigate segregation of duties (SoD) and access-related risks. Analyze the utilization of granted authorizations and permissions, recommending adjustments or restrictions where necessary. Prepare and maintain documentation of authorization risk assessments, mitigation actions, and approved risk acceptance decisions in both business and technical terms. Act as the designated Role Manager in accordance with alfanar's GRC policy, ensuring compliance with internal control and governance requirements. Maintain accurate and up-to-date records of user access rights, authorizations, and role assignments. Produce periodic reports on authorization effectiveness, utilization, and compliance for management review. Support internal and external audit activities by providing required documentation, evidence, and validation of authorization controls.