Must have

• Degree

• Security

• D365

• Role-based access control

• ERP

• CISA

• CISSP

• English

Nice to have

• Azure Active Directory

• GRC

• Power Platform

• Power BI

• Communication skills

• Audit

Requirements description

• Bachelor’s degree in Information Security, Computer Science, or a related field.
• Experience in IT security or internal controls, with at least 1–2 years focused on Microsoft D365 F&O.
• Strong understanding of SoD principles, role-based access control, and critical object protection in ERP systems.
• Experience with RCM development and maintenance, preferably in a regulated or audit-intensive environment.
• Familiarity with Azure Active Directory, Microsoft Defender, and compliance tools such as Microsoft Purview.
• Relevant certifications (e.g., CISA, CISSP, Microsoft Certified: Security Operations Analyst Associate).

Preferred Skills

• Experience with GRC tools (e.g. Sailpoint, Pathlock   or similar) for SoD and access control monitoring.
• Knowledge of Power Platform security (Power BI, Power Apps).
• Strong analytical, documentation, and communication skills.
• Ability to work cross-functionally with IT, audit, and business teams.

Offer description

For our Client we look for a IT Security Specialist (D365).

The role focuses on standardizing and designing security roles in D365, maintaining consistent security principles, and collaborating with the audit team.

The person in this position will be responsible for creating and maintaining proper Segregation of Duties (SoD), assigning and reviewing system permissions, as well as monitoring key security-related activities within the D365 environment

Your responsibilities

1. Implement, and monitor SoD-compliant role structures within D365 F&O to prevent conflicts of interest and fraud.
2. Monitoring and secure critical business objects and transactions, including financial, procurement, and Commercial modules.
3. Maintain and update the Risk Control Matrix (RCM), mapping business processes to risks and controls within the D365 environment.
4. Collaborate with internal audit, compliance, and business process owners to ensure control effectiveness and audit readiness.
5. Conduct regular access reviews, security audits, and SoD conflict analysis using automated tools and manual assessments.
6. Support incident response and remediation activities related to access violations or control failures.