SAP GRC Access Control

We are looking for an experienced SAP GRC Access Control / SoD Consultant with strong hands-on experience in SAP GRC Access Control implementation, configuration, administration, and Segregation of Duties (SoD) risk management. The consultant will be responsible for access governance, risk analysis, role design, user access management, and remediation of SoD conflicts across SAP landscapes.

Role & responsibilities

• Implement, configure, and support SAP GRC Access Control.
• Strong experience in Access Risk Analysis (ARA) and Segregation of Duties (SoD).
• Configure and maintain Business Rules, Risk Definitions, Functions, and Risks.
• Perform User-Level, Role-Level, and HR Object-Level risk analysis.
• Configure and support Access Request Management (ARM) workflows.
• Handle Emergency Access Management (EAM / Firefighter) configuration and administration.
• Perform SoD analysis, risk remediation, mitigation, and reporting.
• Configure MSMP workflows and approval processes.
• Work with SAP security teams for PFCG roles, authorization objects, and role remediation.
• Integrate GRC with SAP ECC/S/4HANA and connected systems.
• Troubleshoot GRC integration, synchronization, workflow, and authorization issues.
• Perform user and role synchronization between GRC and target systems.
• Support periodic access reviews, compliance audits, and access certification.
• Work with business, audit, compliance, and security teams to resolve access risks.
• Prepare technical documentation, configuration documents, and operational procedures.

Mandatory Skills

1. SAP GRC Access Control ARA
2. SoD / Access Risk Analysis & Remediation
3. ARM – Access Request Management & MSMP Workflow
4. EAM / Firefighter
5. SAP Security / PFCG Roles & Authorizations

Good to Have

• SAP GRC 10.x / 12.0 experience
• S/4HANA Security and GRC integration
• SAP Fiori authorization concepts
• CUA / IDM / IAM integration exposure
• SAP Security role design
• Audit and compliance frameworks
• Experience with GRC upgrades and implementation projects
• Knowledge of SAP Cloud Identity Access Governance (IAG)