SAP Security and GRC Consultant (Hybrid: Bangalore)

SAP Security Responsibilities:

• Design and manage role-based security in

  SAP ECC, S/4HANA, BW/4HANA

  , and other SAP modules.
• Create, modify, and troubleshoot

  composite and single roles

  , profiles, and authorizations.
• Manage

  User Administration (SU01)

  ,

  Role Maintenance (PFCG)

  ,

  Authorization Objects

  , and

  Profiles

  .
• Perform

  security role testing

  ,

  SOD checks

  , and

  user audits

  .
• Coordinate with functional teams (FI/CO, MM, SD, HCM, etc.) to map business requirements to security roles.

SAP GRC Responsibilities:

• Configure and maintain

  SAP GRC Access Control modules

  :

• Access Risk Analysis (ARA)

• Access Request Management (ARM)

• Emergency Access Management (EAM)

• Business Role Management (BRM)

• Define and update

  rulesets

  ,

  risk definitions

  ,

  mitigating controls

  , and

  approval workflows

  .
• Handle

  SOD (Segregation of Duties)

  analysis, remediation, and mitigation planning.
• Integrate GRC with SAP systems for

  real-time risk analysis

  and

  access provisioning

  .
• Support audits, compliance reporting, and external/internal control requirements.

Required Skills & Qualifications:

• Bachelor’s degree

  in Computer Science, Information Security, or related discipline.

• 6+ years

  of hands-on experience in

  SAP Security

  and

  SAP GRC Access Control

  .
• In-depth knowledge of:

• SAP User and Role Administration

• Authorization concepts

• GRC Rule Sets

  and

  Mitigation Controls

• Experience with

  S/4HANA Security

  ,

  Fiori App Authorization

  , and

  SAP Cloud Identity Services

  (preferred).
• Familiarity with

  SOX compliance

  ,

  internal audits

  , and

  external regulatory requirements

  .
• Strong troubleshooting skills in resolving security-related issues.
• Understanding of

  ITGC

  ,

  SOX

  ,

  ISO 27001

  , or similar standards.

S4 HANA, GRC, ChaRM, VIM, Power App & BTP