Job Description

We are recruiting for a SAP Security & GRC Lead to join our growing Technology team on a permanent basis. This role will sit within our SOP SAP and Finance CoE team, reporting into the Senior SAP Development and Platforms Service Manager. This role is offered with hybrid working (approx. 2 days per week in the office) and will be based at our London office.
As SAP Security & GRC Lead, you'll be responsible for managing the delivery of the SAP Security and GRC technical support and services across both BAU and projects at Penguin. To be successful in the role, you'll need to be an experienced lead with a proven background in defining strategy to support transitions from an on-premise SAP ECC solution to a cloud-based S/4HANA and BTP.
This role will have key interactions with both business users and technology colleagues, and will have overall responsibility for the delivery of solution design and configuration, technical and auditing support and building a roadmap of improvement projects relating to the current and future SAP landscape (including tools).
About the team
The Technology team provides expertise and effective solutions to Penguin Random House. We integrate flexibility and agility which supports our consistent way of working. We set ourselves up for success by holding ourselves accountable and welcoming change. Each member of the Technology team brings skill and initiative to their role; we take personal ownership within a one team culture, working collaboratively to meet expectations from our stakeholders who trust us to deliver.
The role
Key responsibilities:

• Provide leadership and guidance to the SAP Security team, creating a culture of continuous improvement and innovation.
• Lead the SAP security team in designing, implementing, and maintaining Roles and Authorisations for SAP the landscape including BTP and Signavio.
• Manage security processes, including risk assessments, audits, and division of duties.
• Ensure the governance of SAP Roles & Authorisations and undertake audits to deliver licence optimisation.
• Drive a cultural shift to ensure security is at the core of business process design.
• Develop and enforce security policies, procedures, and standards to ensure compliance with industry regulations and best practices.
• Collaborate with IT and business units to identify security risks and develop mitigation strategies.
• Conduct regular security audits and assessments to ensure the integrity and security of SAP systems.

• Stay updated on the latest SAP security trends and technologies to ensure we remain at the forefront of security practices.

What you'll bring
Essential criteria:

• Strong knowledge of SAP security and authorisations principles and practice.
• Demonstrable experience of full SAP project lifecycles as a SAP Security Lead.
• Deep understanding of GRC, risk management and segregation of duties.
• Knowledge in access control within BTP and SAP Signavio (SAP Cloud Identity Access Governance).
• Strong understanding of SAP Authorisation concepts across SAP modules.
• Experienced in Audit.
• Future-focussed e.g. SAP Cloud Identity Access Governance.
• Experienced in licence optimisation & understanding of SAP FUE model.
• Flexibility and willingness to travel to other Penguin Random House sites as necessary and to support out-of-hours when required.
• Ability to commit to the hybrid working model mentioned above.

Desirable criteria:

• SAP Security and GRC certifications are highly desirable.

Application instructions
Please apply with your CV by 23:59 on Friday 3rd October 2025. Applications will be reviewed on a rolling basis and the advert may close at any time. We would encourage you to apply as soon as possible.
Please note we are looking for someone to join the team as soon as possible, but we are also happy to accommodate a reasonable notice period for the right candidate.
Salary
The salary for this opportunity is up to c.80,000, depending on how your skills and experience align to the role and your office location, plus a generous bonus scheme and benefits.
Hybrid working
While our offices across the UK are places to connect, collaborate and celebrate with colleagues, we recognise that flexibility around where you work is just as important. For this role we expect that you will work from our London office 2-3 days per week (typically Tuesday & Thursday).
The recruitment process: You can read about our recruitment process at
As a Disability Confident Committed organisation, we're part of the offer an interview scheme. This is where disabled applicants who meet the essential criteria for the role can opt in to get to the next recruitment stage. There may be some situations where volume of applicants means we can't take all eligible candidates to interview.
We encourage you to tell us about any reasonable adjustments you may need by emailing . Remember, you only need to share what you are comfortable to for us to support your request.
Please note, we are not able to accept agency CVs for this role. Any CVs sent speculatively will not be eligible for a fee.
Company: The Random House Group Limited | Job ID: 283016

Skills Required