Role Description We are currently searching for a SAP Security Specialist: - Access & Role Management: Take full ownership of technical role, user, and authorization management across SAP Systems (specifically SAP ECC). - Role Design & Remediation: Design, modify, and maintain SAP security roles to meet evolving business requirements. Actively lead projects related to Segregation of Duties (SoD) conflict remediation. - Requirements Translation: Effectively translate business and functional specifications into secure, compliant, and technical SAP role designs. - Compliance & Governance: Ensure a consistently high level of compliance. Support the Change Management Process to maintain consistency of security and roles across all SAP landscapes. - Testing & Validation: Support end-user Acceptance Testing (UAT) and Integration testing. Perform technical validation of customized transactions. - Daily Operations & Troubleshooting: Provide day-to-day technical support, resolving security issues and troubleshooting complex SAP security problems (including approval procedures and compliance checks). Manage steady-state operational activities. - Leadership & Independence: Handle customer interactions independently and act as a functional lead/mentor for Junior consultants on the team. Qualifications - 2 to 3 years of hands-on, proven experience in SAP Security and SAP GRC within an SAP ECC environment. - Deep understanding of SAP role design methodologies, authorization concepts, and user management. - Practical experience identifying, analyzing, and remediating Segregation of Duties (SoD) conflicts. - Strong ability to interact directly with customers, translate their needs into technical security controls, and lead junior team members. - Willingness to work in shifts as and when required, and to support customers during out-of-office hours for critical issues. Requirements - Experience with SAP S/4HANA security (as a future-proofing skill). - Relevant SAP Security or GRC certifications. - Advanced Oral English. - Advanced Spanish. Benefits - Fully remote work environment.

• Lead as an AI-first effort ensuring automation and intelligence as the default. • Stay hands-on and directly engage with the codebase. • Own end-to-end delivery of the product roadmap set by Product Management. • Set technical direction and drive architecture and technology choices. • Build and lead a high-performance team across Romania and Hungary. • Drive performance-based management with clear expectations. • Hold a security-first quality bar incorporating code review with a security lens. • Raise engineering velocity continuously improving team workflows. • Codify AI-native practices for the portfolio facilitating adoption. • Partner cross-functionally with Product Management and other teams.

• Play a leading role in DataDome’s ISO 27001 program, driving day-to-day execution across control maturity, evidence collection, internal audits, and audit preparation. • Help maintain DataDome’s SOC 2 Type II program over time, ensuring controls, evidence, and follow-up actions stay on track. • Keep compliance work practical, reliable, and scalable as the company grows. • Run the risk management process in practice, including risk assessments, workshops, the risk register, treatment plans, and follow-up. • Work with both technical and business stakeholders to identify and assess risks in a structured and useful way. • Help teams turn risk findings into clear, prioritized remediation actions. • Handle third-party security reviews for internal tools and vendors, including onboarding assessments, reassessments, and follow-up actions. • Check that key controls are actually in place across tools and processes, spot gaps or weak configurations, and make sure remediation is tracked and moving with the right teams. • Lead the security awareness program, including training, phishing simulations, and effectiveness tracking. • Act as a key security partner for Legal, HR, Finance, and Business Operations on topics such as people controls, data handling, and process design. • Help Sales on security topics when needed, including writing clear, accurate, and high-quality answers to security questionnaires and supporting follow-up discussions during the sales cycle. • Be comfortable representing security during audits, including explaining how controls work, answering auditor questions, and following up on findings.

• Own and evolve our vulnerability management program with a focus on application security — container images, dependencies, code scanning, and runtime detection • Build and maintain security tooling that integrates directly into CI/CD pipelines and developer workflows, so security happens automatically rather than as a gate • Use AI extensively to write code faster, automate analyses that would otherwise require manual review, and build intelligent tooling that scales beyond what a small team could achieve manually • Assess and improve how we leverage available telemetry across our systems • Work directly with engineering teams to influence secure development practices — not by writing standards and documents, but by shipping tools and defaults that make the secure path the easy path • Investigate and respond to security findings when needed, but spend more of your time building systems that prevent and detect issues than manually chasing them • Adapt quickly as priorities shift — our team is agile and tomorrow's challenge may look different from todays