SAP Security & GRC Consultant

SAP Security & GRC Consultant

SAP Security & GRC Consultant

Experience-3.5+ Years

Notice Period-Immediate

We are looking for an experienced SAP Security & GRC Consultant to manage and enhance user access, roles & authorizations, compliance, and risk management within SAP environments. The ideal candidate should have expertise in SAP Security concepts, Role Design, GRC Access Control, Process Control, Risk Analysis, and Audit Compliance. This role involves collaborating with business and IT teams to ensure secure, compliant, and optimized SAP access management.

Key Responsibilities:

• Design, implement, and maintain SAP roles and authorization concepts across SAP S/4HANA, ECC, BW, Fiori, and other SAP applications.
• Manage and optimize SAP GRC (Governance, Risk & Compliance) solutions, including Access Control (AC), Process Control (PC), and Risk Management (RM).
• Perform user provisioning, role assignment, and access reviews to ensure compliance with SOX, GDPR, and other regulatory standards.
• Conduct Risk Analysis, Segregation of Duties (SoD) checks, and remediation to mitigate security risks.
• Implement and maintain GRC workflows for User Access Management (UAM) and Emergency Access Management (EAM) or Firefighter Access.
• Support SAP Security audits, risk assessments, and compliance checks, providing necessary reports and documentation.
• Participate in SAP system upgrades, migrations, and new implementations to ensure proper security design.

Required Skills & Experience:

• 5 to 7 years of experience in SAP Security and Roles & Authorization Management.
• Strong expertise in SAP GRC Access Control (AC), Process Control (PC), Risk Management (RM), and SoD Analysis.
• Hands-on experience with User Access Review (UAR), Role-Based Access Control (RBAC), and Privileged Access Management (PAM).
• Deep understanding of SAP Authorization Objects, SUIM, PFCG, SU24, and Role Derivation concepts.
• Experience in Fiori Security, S/4HANA Security, and Business Role Management (BRM).