Specialist Security Consultant

The Specialist Security Consultant is a hands-on security specialist supporting the secure design and delivery of a programme to transform and migrate the core business SAP platform and its wider integration across the business.

The role provides expert security assurance, architectural design review, and technical guidance to the transformation programme to effectively deliver a journey from blended SAP ECC to cloud-native SAP S4/HANA core, and the development of robust and secure interfaces to multiple critical business applications and functions across the organisation. The role will be embedded within the delivery programme, working closely with the Principal Security Consultant and Business Information Security Officer (BISO) for the Central domain, along with other Infosec and business stakeholders, to ensure security risks are identified early, assessed pragmatically, and managed in line with business priorities and enterprise risk appetite.

Review and assess solution designs and architectures for the SAP transformation programme

Identify security risks across identity, APIs, cloud services, data flows, third-party integrations, and proposed data migrations or interim connections to facilitate the transformation

Provide clear, proportionate security recommendations aligned to enterprise standards

Advise on embedding security controls into all aspects of the SAP transformation/migration plan

Support secure engineering and operational practices across design, build, deploy, and operate phases

Who you are

Experience in security consulting, product security, or application security

Strong background in SAP on-prem, hybrid and cloud, as well as general online and digital platforms (web, mobile, APIs, e-commerce) and their integrations.

Proven knowledge and experience to review, asses and challenge technical designs and architectures, and associated architectural governance practices

Strong understanding of enterprise integration challenges, methods and tooling to ensure end-to-end data protection across business functions.

Hands-on knowledge of DevSecOps and modern CI/CD practices.

What’s in it for you

Being a part of M&S is exactly that – playing your part to bring the magic of M&S to our customers every day.