Sr. SAP GRC Security Consultant

Accountabilities

• • Design, configure, and maintain user roles, authorizations, profiles, and access controls across SAP S/4HANA and Fiori environments.
  • Configure and administer SAP BTP Identity Access Governance (IAG), supporting access risk analysis, segregation of duties (SoD), and automated access certifications.
  • Manage role-based and data-level security controls across SAP Analytics Cloud (SAC) and SAP Datasphere.
  • Partner with business process owners to translate functional requirements into effective role, authorization, and access-control designs.
  • Design, maintain, and monitor SoD rulesets, conduct risk analysis, and coordinate remediation across cloud and on-premise SAP environments.
  • Conduct periodic user access reviews, audit-trail analysis, compliance checks, and control assessments aligned with SOX, GDPR, and internal audit requirements.
  • Prepare audit evidence, security documentation, control reports, and supporting materials for internal and external audits.
  • Collaborate with Basis, functional, IAM, and other technical teams to ensure secure and compliant end-to-end access management.
  • Independently manage complex access-control issues, assess security risks, and communicate recommendations clearly to business and IT stakeholders.
  • Contribute to continuous improvements in SAP security governance, access processes, controls, and audit readiness.

  Requirements

  • 7–10 years of hands-on experience in SAP Security and GRC across SAP S/4HANA and cloud environments.
  • Strong experience with SAP GRC Access Control, including Access Risk Analysis (ARA), Emergency Access Management (EAM), Access Request Management (ARM), and Business Role Management (BRM).
  • Strong hands-on expertise with SAP BTP Identity Access Governance (IAG), SAP Analytics Cloud (SAC), and SAP Datasphere security and auditing.
  • Solid understanding of SAP S/4HANA and Fiori security, including role design, authorization concepts, and access provisioning.
  • Strong understanding of SAP business processes and the ability to translate business requirements into appropriate security and control designs.
  • Proven experience managing SoD rulesets, access-risk analysis, remediation, and governance processes across hybrid SAP landscapes.
  • Experience supporting SOX, GDPR, or equivalent compliance and audit programs, including access reviews, control testing, and evidence preparation.
  • Ability to independently troubleshoot and manage complex security landscapes while communicating technical risks effectively to senior business and IT stakeholders.
  • Experience with SAP HANA database security, including user management, privileges, and audit-log configuration, is a plus.
  • Familiarity with SAP Cloud Identity Services, IAS/IPS, SSO using SAML 2.0 or OIDC, and integrations with Azure AD or Okta is advantageous.
  • Exposure to Cloud ALM security and SAP BTP trust configuration is beneficial.
  • SAP GRC or SAP Security certification is a plus.
  • Strong analytical, communication, stakeholder-management, and problem-solving skills.
  • Willingness and ability to work a US shift, approximately 5:30 PM to 2:30 AM IST.
  • Immediate to 30-day availability is preferred.

  Benefits

  • Full-time, permanent employment.
  • Remote work opportunity from anywhere in India, with the role aligned to a US shift.
  • Opportunity to work on enterprise-scale SAP S/4HANA, GRC, and BTP security environments.
  • Exposure to modern cloud security, identity governance, access-risk management, and compliance initiatives.
  • Opportunity to collaborate with business stakeholders, SAP COE teams, IAM specialists, Basis teams, and functional experts.
  • Senior-level scope with the opportunity to influence security architecture, governance standards, and audit readiness.
  • Professional growth through exposure to complex hybrid SAP landscapes and evolving cloud technologies.