SAP GRC and Security Consultant

Role - SAP Security & Governance, Risk, and Compliance

Exp 6-9 Yrs

Location Bangalore

SAP Security and GRC Leadership

Lead and manage SAP Security and GRC initiatives across SAP landscapes, including SAP S/4HANA and SAP Cloud products.

Design, implement, and maintain SAP roles, authorizations, and security profiles aligned with business and compliance requirements.

Drive Segregation of Duties (SoD) analysis, remediation, and mitigation control design.

Partner with business, internal audit, compliance, and IT teams to ensure adherence to governance, risk, and control requirements.

Integrate SAP GRC with SAP Cloud products such as SAP Business Data Cloud (BDC), SAP Analytics Cloud (SAC) and SAP BTP using SAP Identity Access Governance (IAG) as the bridge.

Implement, maintain, and enhance GRC workflows.

SAP GRC Access Control

Oversee and operate SAP GRC Access Control processes, including:

Access Risk Analysis (ARA)

Emergency Access Management (EAM)

Access Request Management (ARM)

Business Role Management (BRM)

User Access Review (UAR)

GRC / Security Support and Implementation

Build, deploy, and maintain SAP user roles and authorizations, ensuring systems remain compliant and security risks are mitigated.

Support the implementation of access and roles in adherence with corporate standards and policies.

Optimize security definitions, identify inefficiencies, and propose solutions that strengthen system security and compliance.

Contribute to the cleanup of obsolete roles in line with the organization's role-strategy roadmap.

Governance and Compliance

Implement security best practices to safeguard SAP resources and ensure data protection.

Support compliance efforts, ensuring all systems meet industry standards and regulatory requirements.

Support audit activities and provide requested evidence on time.

Risk Analysis and Mitigation

Run SoD reports, analyze risks within existing roles and authorizations, and remediate identified risks on time.

Design and maintain mitigating controls where remediation is not feasible, with clear ownership and review cadence.

Operational Excellence and Optimization

Collaborate with the Lead Engineer to execute the technical plan, contributing insights on process improvement and optimization.

Monitor and troubleshoot access issues across all environments.

Identify cost-optimization opportunities and assist in tracking and eliminating unused or underutilized resources to support cost-saving initiatives.

Technical Leadership and Collaboration

Mentor junior engineers and lead knowledge-sharing initiatives across the team.

Collaborate with the Lead Engineer and team members to execute work programs aligned with business and corporate strategies.

Partner with ABAP developers on custom authorization objects and security process enhancements.

Vendor and Stakeholder Engagement

Engage with vendors and service providers, ensuring technical requirements and project deliverables are met.

Collaborate with internal stakeholders to support project delivery, ensuring clear communication on changes and progress.

Documentation and Reporting

Maintain detailed documentation of system configurations, changes, and procedures to ensure operational continuity and compliance.

Report on security risks and issues, providing recommendations for remediation as necessary.

Key Competencies

SAP Security Architecture

SAP GRC Access Control (ARA, EAM, ARM, BRM)

Segregation of Duties (SoD) Management

Risk and Compliance Management

SAP S/4HANA Security Design

SAP Cloud Security SAC, BTP, IAG integration

Audit and Controls Support

Stakeholder Management

Leadership and Team Mentoring

Analytical and Problem-Solving Skills