SAP Security & GRC Consultant

Role & responsibilities

Role Summary

We are seeking an experienced SAP Security and GRC Consultant with strong expertise in SAP role design, authorizations, access governance, audit controls and compliance. The consultant must have hands-on experience in ECC-to-S/4HANA migration, Central User Administration, SOX reporting and SAP GRC Access Control.

Key Responsibilities

• Design, create and maintain SAP security roles and authorizations across ECC, S/4HANA, BW and Fiori.
• Support security activities for ECC-to-S/4HANA migration projects.
• Perform user provisioning, de-provisioning and access lifecycle management.
• Configure and maintain Central User Administration (CUA).
• Configure and support SAP GRC Access Control modules, including ARA, ARM, BRM and EAM.
• Conduct Segregation of Duties analysis and remediate access conflicts.
• Create, assign and monitor mitigation controls.
• Configure and manage access-request, role-approval and Firefighter workflows.
• Execute user-access reviews, access certifications and privileged-access reviews.
• Perform audit and control-execution activities.
• Prepare periodic monthly, quarterly and annual SOX compliance reports.
• Generate user-activity, risk-analysis and compliance reports.
• Investigate security incidents, missing authorizations and role conflicts.
• Troubleshoot authorization issues using SU53, ST01, STAUTHTRACE and SUIM.
• Work with functional, technical, business and audit teams to implement secure SAP solutions.
• Prepare security documentation, audit evidence and remediation plans.
• Train end users and support teams on SAP Security and GRC processes.

Mandatory Skills

• Minimum eight years of SAP Security and GRC experience
• SAP GRC Access Control
• ECC-to-S/4HANA security migration
• Central User Administration
• Audit and controls execution
• Periodic SOX reporting
• SoD analysis and remediation
• User provisioning and access management
• SAP role design and authorization management

SAP ECC, S/4HANA and Fiori Security

Preferred candidate profile

SAP Security & GRC Consultant

Experience: 8+ years
Role: Senior SAP Security & GRC Consultant

1. Candidates must be based in Hyderabad.
2. Candidates must be willing to attend one face-to-face client interview.
3. Candidates must be willing to work in a hybrid model from the client location.

SAP GRC - Minimum 8 years

Shift timing - General but should be flexible to work on different time zone based on project needs whenever require.