SAP Cybersecurity Architect

Who is Ypto? Ypto is the IT company behind the Belgian Railways (NMBS) and plays a key role in the digital transformation of our national rail system. Their work impacts thousands of NMBS employees and millions of train passengers. Every day, hundreds of Ypto employees work in partnership with NMBS to contribute to a CO2-neutral world and improve NMBS operations and services. Ypto has an impressive 400 internal employees and is headquartered in Anderlecht, near Brussels Midi Station. SAP Team Structure The SAP team, led by Joris Cuypers (Head of Applications), consists of four B usiness A rea M anagers (BAMs) overseeing the SAP landscape: BAM 1: SAP FICO, HR, SD, CX BAM 2: Procurement, Warehousing, Master Data, Train Maintenance BAM 3: Transversal Domains (Development, Basis, Authorisations & Security) – Rony Cools BAM 4: Business Services & Architecture To bridge the gap and ensure effective collaboration between the SAP Security & Authorisations, CISO and shERPa team, Ypto is looking for a SAP Cybersecurity Architect. You will report to Rony Cools and work closely with Joris Cuypers in this role. SAP Cybersecurity Architect – Responsibilities As a SAP Cybersecurity Architect, you will translate the central CISO strategy into practical cybersecurity solutions for NMBS’s SAP ECC to S/4HANA transformation (ShERPa Project). You will act as the primary bridge between the ShERPa and CISO teams to ensure strong collaboration on security topics. In your first days, you will conduct security assessments, align closely with the CISO department, map key stakeholders, and get familiar with the ShERPa club. You will then fully step into the role: deliver concrete results with the CISO and put the required measures in place to drive the SAP security program forward smoothly. Key Responsibilities: Information Security & Risk Management Maintain and evolve the ISMS aligned with international standards, perform SAP risk analyses, drive mitigation plans, keep the SAP risk register up-to-date, and support internal/external audits. Cybersecurity Solutions & Services Define requirements for cybersecurity tools and services, collaborate closely with SAP Basis and CISO teams on CSIRT activities, and lead IAM and access governance across the SAP landscape. Governance & Awareness Implement and monitor security policies and procedures, drive organisation-wide security awareness initiatives, and serve as the primary liaison for SAP-related security incidents and policy enforcement. Reporting & Compliance Prepare reports for senior management and the CISO team, support IT audits & compliance frameworks, and coordinate with the DPO and Risk Manager on findings and security breaches. Knowledge Development Stay ahead of the latest SAP security and cybersecurity trends, and actively share insights while fostering continuous learning within the ERP organisation. Your profile Seasoned CISO officer with over 5 years’ experience leading information security in large-scale, complex organisations, within an SAP environment. 3+ years in SAP security, risk management, and compliance. Experience with SAP cloud solutions and ISO2700x/GDPR certification projects. Proactive project leader with a structured, pragmatic and result-driven approach. Outstanding communication skills in NL, FR and ENG: able to translate complex technical topics into clear business language for executives and non-technical stakeholders. Excellent coordinator with the ability to build bridges between teams. Why Join Ypto? Largest SAP Landscape in Belgium – High complexity and innovation (S/4HANA, FIORI, etc.). A role with strategic importance in one of Belgium’s largest S4H transformations Work-Life Balance: 2 days of home working, 35 vacation days, flexible hours. Attractive Benefits: Competitive salary, company car, fuel/charging card, first-class train pass. Sustainability Focus: Committed to a greener future.