SAP Security & GRC Consultant

Job Summary:

We are looking for a highly skilled SAP Security & GRC Consultant to join our team. The ideal candidate will have deep expertise in SAP Security architecture, GRC Access Control (AC), and SoD management, with hands-on experience in implementing and supporting SAP security solutions across multiple SAP landscapes (ECC, S/4HANA, BW, Fiori, etc.). This role requires a proactive professional who can design, implement, and manage security controls while ensuring compliance with organizational policies and audit requirements.

Key Responsibilities:

Design, implement, and maintain SAP security roles and authorizations across SAP systems including ECC, S/4HANA, Fiori, BW, CRM, etc.

Configure and manage SAP GRC Access Control modules: ARA (Access Risk Analysis), BRM (Business Role Management), EAM (Emergency Access Management), and ARM (Access Request Management).

Conduct Segregation of Duties (SoD) analysis and risk remediation.

Perform security audits, support internal and external audit requirements, and implement mitigation controls.

Work with functional and technical teams to align security design with business processes.

Administer user access provisioning, role changes, and user reviews.

Maintain and monitor security logs, change history, and access violations.

Document and update security and compliance procedures, policies, and training material.

Stay updated with SAP security and GRC best practices, patches, and compliance trends.

Required Skills & Experience:

6+ years of experience in SAP Security and GRC Access Control.

Strong understanding of SAP authorization concepts, role design, and user administration.

Experience with GRC AC 10.x/12.x, including configuration, rule set customization, and workflows.

Good knowledge of SAP Fiori security, OData services, and UI5 authorization.

Experience with SOX compliance, audit processes, and risk remediation.

Hands-on experience in transport management and change controls within SAP.

Proficiency in S/4HANA security and understanding of HANA DB privileges.

Familiarity with SAP IDM (Identity Management) is a plus.

Strong analytical and troubleshooting skills.

Preferred Qualifications:

Bachelor’s degree in Computer Science, Information Systems, or related field.

SAP Security and/or GRC certification is a plus.

Experience working in regulated industries (Pharma, BFSI, etc.).

Knowledge of ITIL and ticketing tools like ServiceNow, Remedy, etc.