Engineer, SAP Security

Job Summary

The Engineer, SAP Security is responsible for the design and implementation of SAP authorization concepts including role design (Single/Composite/Derived), securing custom transactions, maintaining SU24 entries, and enforcing SOX and IT general controls compliance. This position reports to the Manager, SAP Security and will be located in Pune, India and will be an onsite role.

In this role, you will have the opportunity to:

• SAP authorization concepts, including role design (Single/Composite/Derived roles), securing custom transactions, maintaining SU24, and ensuring compliance with SOX and IT general controls.
• SAP security across modules and Basis components, including ECC and S/4. Familiarity with at least one S/4 implementation cycle, along with GRC Access Control configuration (10/10.1/12), BRF+, and SAP GRC AC components (ARA, EAM, ARM, BRM).
• Developing and maintaining SAP roles to ensure Segregation of Duties (SoD), clear access controls, and adherence to security and audit requirements. Good understanding of SOX requirements and developing standard work in security space to enforce SOX standards. Participates in audits (SOX and others) and enforces effective control and monitoring processes.
• Thorough understanding of business processes and dependencies between SAP modules and systems, working cross-functionally with teams (Functional, Developers, BASIS) to support user access needs, issue resolution, and system monitoring.
• Develop and refining security processes, assist in testing and implementing system changes, and contribute to documentation, blueprinting, and user requirements gathering to enhance security efficiency and compliance.

Requirements

• Bachelors degree in computer science, Information Systems, or a related field.
• 7+ years of SAP Security experience with SAP authorizations (ERP and HANA) as a consultant or worked in a customer-facing environment (Internal or External) with at least 2 years of SAP GRC in Access control (12.x).
• Understanding of Business Rule Framework, BRF+. Knowledge and experience of initial GRC Access Control 10/10.1/12 configuration, knowledge and experience of configuring SAP GRC AC Components (ARA, EAM, ARM, BRM).
• Experience of working with Internal and External Audit - SAP security audit skills.

Travel, Motor Vehicle Record Physical/Environment Requirements

• Ability to travel - up to 10 % travel, overnight, within territory or locations
• Must have a valid driver's license with an acceptable driving record

It would be a plus if you also possess previous experience in

• Exposure to ITIL Framework.
• Awareness of Information Security principles.
• Knowledge of SAP Public Cloud security integration (SAP BTP) and access risks.

Disclaimer: This job posting and Location has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.