SAP GRC and Security Consultant

Role & responsibilities

SAP Security

• Design, build, and maintain SAP security roles (Single, Composite, and Derived Roles).
• Perform user administration, authorization troubleshooting, and access provisioning.
• Analyze authorization issues using SU53, ST01, SUIM, and authorization trace tools.
• Manage SAP security across ECC, S/4HANA, Fiori, and other SAP applications.
• Support role transport and migration activities across landscapes. [Nithin_GRC | Word], [Madhuri J SAP GRC CV | Word]

SAP GRC Access Control

• Configure and support:
• Access Risk Analysis (ARA)
• Access Request Management (ARM)
• Business Role Management (BRM)
• Emergency Access Management (EAM / Firefighter)
• Design and maintain Segregation of Duties (SoD) rule sets and risk libraries.
• Configure mitigation controls, monitors, and compliance workflows.
• Perform user, role, and profile-level risk analysis.
• Manage User Access Reviews (UAR) and audit compliance activities.
• Configure MSMP workflows, approval processes, notifications, and escalation rules
• Support SOX, ITGC, and internal audit compliance requirements.
• Conduct periodic access certification and compliance reviews.
• Prepare audit documentation and remediation plans.
• Drive risk mitigation and access governance initiatives across SAP environments