Job Summary
The Lead Consultant in SAP Security GRC Administration will be responsible for overseeing and managing the security and compliance aspects of the SAP system. They will play a crucial role in implementing, maintaining, and enhancing security controls within the SAP GRC environment to ensure the confidentiality, integrity, and availability of data.
Key Responsibilities
2. Conduct regular security assessments, audits, and reviews to identify and mitigate risks.
3. Collaborate with cross functional teams to implement security best practices and policies.
4. Provide expertise in resolving security incidents and implementing security patches and upgrades.
5. Develop and deliver training programs to educate users on security protocols and procedures.
Skill Requirements
Experience
8–10 years of SAP Security and GRC experience with strong leadership exposure in SAP S/4HANA security, Fiori security, SAP GRC Access Control, access review, compliance, audit support, SAP security testing and SAP BTP security.
Core SAP Security Skills
Lead SAP Security operations and role design across SAP ECC, S/4HANA, Fiori, HANA, GRC and cloud-connected SAP landscapes.
Lead role build and role redesign using task-based, business-process-aligned and least-privilege security principles.
Resolve complex SAP authorization issues across business processes using trace tools, authorization objects, PFCG, SUIM, security tables and Fiori troubleshooting tools.
Lead SAP S/4HANA and Fiori security design including business roles, technical roles, catalogs, groups, spaces, pages and launchpad authorization concepts.
Define and review role design documents, access matrices, test scripts, cutover plans, SOPs and operational handover documents.
Lead security testing, defect resolution, retesting, cutover support and go-live/hypercare security activities.
Manage customer-facing security discussions, escalation calls, issue reviews and audit meetings.
Additional Skills – GRC, Access Review, Testing, Migration, SaaS and BTP
Lead SAP Security workstreams for ECC to S/4HANA migration, upgrade and transformation programs.
Lead implementation and support of SAP GRC Access Control modules including ARA, ARM, EAM, BRM and UAR.
Define and review SoD rulesets, mitigating controls, risk remediation strategies and access governance processes.
Drive periodic access certifications, user access reviews, Firefighter reviews, audit reporting and compliance reviews.
Conduct security assessments, access risk analysis, audit readiness reviews and control validation.
Lead SAP BTP security setup including role collections, identity provider integration, authorization design and cloud access governance.
Support SAP SaaS security model and access governance for SuccessFactors, Ariba, Concur, SAC, Datasphere, IBP, Fieldglass and other SAP cloud products.
Coordinate with business, functional, Basis, integration, audit and compliance teams to close security and control issues.
Provide technical guidance for S/4HANA upgrade, migration, conversion and post-go-live security stabilization.
Good to Have
SAP GRC Process Control support or implementation experience.
SAP S/4HANA implementation, migration or RISE transformation experience.
SAP BTP security architecture exposure.
HANA database security exposure including users, roles, privileges and schema-level controls.
IAS, IPS, SAML, OAuth, SCIM, X.509 certificates and cloud identity federation exposure.
Automation or reporting experience using GRC reports, SAP tables, scripts, dashboards or access analytics.
SAP Security, SAP GRC, SAP S/4HANA, SAP BTP or audit/compliance certification.