SAP Security Consultant-@Infosys

We are looking for an experienced SAP Security & GRC Consultant to manage SAP authorization concepts, role administration, user access management, and compliance requirements across SAP landscapes.

Key Responsibilities

• Design, build, and maintain SAP security roles and authorizations across SAP ECC, S/4HANA, BW, APO, CRM, and Fiori environments.
• Manage user administration activities including user creation, modification, lock/unlock, and access provisioning/deprovisioning.
• Perform role redesign, role optimization, and authorization troubleshooting.
• Conduct Segregation of Duties (SoD) analysis and remediation using SAP GRC Access Control.
• Execute User Access Reviews (UAR), Firefighter monitoring, and audit support activities.
• Collaborate with business users and functional teams to gather security requirements.
• Support SAP system upgrades, migrations, and implementation projects from a security perspective.
• Analyze authorization issues using SU53, ST01, STAUTHTRACE, SUIM, and related SAP security transactions.
• Ensure compliance with SOX, ITGC, and internal audit requirements.
• Prepare security documentation, access matrices, and audit evidence.

Required Skills

• Strong experience in SAP Security and Authorization concepts.
• Hands-on experience in role creation and maintenance (Single, Composite, Derived Roles).
• Experience with SAP GRC Access Control (ARA, ARM, EAM, BRM).
• Knowledge of SAP Fiori Security and Gateway authorizations.
• Good understanding of SAP ECC and/or SAP S/4HANA Security.
• Experience in Security Administration and User Management.
• Expertise in SoD analysis, risk mitigation, and compliance controls.
• Experience supporting audits and regulatory compliance requirements.

Preferred Skills

• SAP Security Certification.
• Experience with SAP BTP Security, IAS/IPS, or Cloud Identity solutions.
• Knowledge of SAP HANA Database Security.