Senior SAP Security Analyst

About Position / Position Summary

We are seeking an experienced Senior SAP Security Analyst with deep SAP security technical skills and proven leadership and self-driven capabilities. This role will contribute to the evolution of our SAP Security program across complex, regulated SAP landscapes supporting various Business Units. The ideal candidate will be a hands-on technical leader with deep expertise across SAP security, SAP GRC, Role Based and Attribute Based Access Controls (RBAC and ABAC), user lifecycle, and identity provisioning and a proven track record leading cross-functional teams and security initiatives in large, complex SAP landscapes.

You will join the SAP Center of Excellence team to design, implement, and manage SAP Security by enhancing security controls, improving operational efficiency, and support compliance across multiple business units. You must have experience implementing SAP security in large organizations and collaborating with cross-functional teams, technical resources, and business partners. You will support your team with expertise in analyzing and resolving complex technical issues, standardizing and documenting daily operating procedures and quick reference guides, and participating in identifying development opportunities for Security Analysts.

This role will be based out of Bengaluru, India.

Position Responsibilities:

• Lead design, implementation, and operation of SAP security controls across ECC and S/4HANA environments, including role design, role mining, and role optimization.
• Provide expert guidance on RBAC and ABAC configuration for S/4HANA, MDG, GTS, BW, HANA DB environments, and custom ABAP developments, review transports and change controls for security impact. Lead by example.
• Ensure SAP RBAC and ABAC support export control data handling (ITAR/EAR/UK MOD) and program-specific access restrictions.
• Assist with attestation and evidence collection for internal audit, external auditors, GTC reviews, and SOX compliance reviews.
• Understand legal privacy requirements (managing PII and HSPII data and GDPR requirements) and how to apply appropriate security controls.
• Understand enterprise policies and processes and apply to SAP application RBAC and ABAC controls.
• Enforce, and continuously improve Segregation of Duties (SoD) rules and remediate violations in partnership with business process owners.
• Implement and manage privileged access controls, including privileged account discovery, monitoring, and logging.
• Drive security risk assessments, perform access reviews and attestations, and report compliance status to internal audit and external regulators.
• Stay current with SAP security best practices and help deploy roadmap items such as S/4HANA security hardening, Fiori security, and cloud/SaaS integrations.
• Mentor, coach, and identify development opportunities for a team of SAP security analysts.
• Support incident response, investigate potential access breaches, and lead post-incident reviews.
• Document processes, update runbooks, standardize security implementation methodology and develop implementation playbook, and develop quick reference guides for user self-service.
• Explore tools like Tricentis Live Compare and leverage them to simplify and automate SAP Security processes.

Basic Qualifications (Required Skills/Experience):

• Minimum of bachelors degree or higher is mandatory.
• 14+ years of progressive SAP security experience in large enterprise environments; hands-on with multiple SAP modules.
• 12+ years strong expertise in role design, role-based access control (RBAC), SoD, authorization objects, and profile generation.
• 5+ years practical experience with SAP S/4HANA security, Fiori authorization concepts, SAP BTP Security and advanced troubleshooting.
• Familiarity with ABAP security considerations, transport movement, and secure development practices.
• Excellent stakeholder management, communication, and leadership skills; experience leading teams and cross-functional projects.

Preferred Qualifications (Desired Skills/Experience):

• Certifications preferred: SAP Certified Technology Associate / Professional in security topics, CISA, CISSP, or IAM-related certifications.
• Knowledge of export control handling in SAP (data tagging, filtered views, master data partitioning).
• Experience with Data Obfuscation, Data Masking and Data Encryption.
• Demonstrable experience with SAP GRC Access Control (access risk analysis, business role management, emergency access management).
• Building SharePoint site to document Security process, procedures, project playbooks, and quick reference guides to be consumed by project teams and end users.
• Experience working for aerospace manufacturers, defense contractors, or on DoD/FAA programs.

Typical Education & Experience:

Education/experience typically acquired through advanced technical education (e.g. Bachelor) and typically 14 or more years' related work experience or an equivalent combination of technical education and experience (e.g. PhD+9 years' related work experience, Master+12 years' related work experience, 18 years' related work experience, etc.).

Education

Bachelor's Degree or Equivalent Required

Shift

Shift 1 - Morning (India)