SAP GRC and Security Consultant

Company Name: Brillio technologies

Job Title: SAP GRC Security & Governance, Risk, and Compliance

Experience: 6-9 years

Location: Bangalore

Work Mode: WFO

The SAP Security & GRC Lead drives end-to-end SAP security and compliance across S/4HANA and SAP Cloud products. The role designs and governs roles, authorizations, and access controls to meet business, audit, and regulatory needs. It leads Segregation of Duties (SoD) analysis and remediation, oversees SAP GRC Access Control operations, and maintains effective mitigating controls. The position integrates SAP GRC/IAG with SAC, BTP, and Business Data Cloud, enhances GRC workflows, and partners with stakeholders, auditors, and IT teams. It mentors junior engineers, supports audits, optimizes role landscapes, and ensures robust documentation and reporting.

Required Qualifications

• 6-9 years of hands-on SAP Security and GRC experience, including leadership of initiatives across multi-system landscapes
• Expertise in SAP GRC Access Control modules: Access Risk Analysis (ARA), Emergency Access Management (EAM), Access Request Management (ARM), Business Role Management (BRM), and User Access Review (UAR)
• Strong knowledge of SAP S/4HANA security design, role/authorization concepts, and risk-based access design
• Proven SoD (Segregation of Duties) analysis, remediation, and mitigating control design and maintenance
• Experience integrating SAP GRC with SAP Cloud products (SAC, BTP, Business Data Cloud) using SAP Identity Access Governance (IAG)
• Ability to configure, maintain, and enhance GRC workflows and processes
• Experience supporting audits, producing evidence, and aligning with governance, risk, and compliance requirements
• Skilled in troubleshooting access issues and monitoring across environments
• Collaboration with ABAP developers on custom authorization objects and security process enhancements
• Stakeholder and vendor engagement, with strong documentation, reporting, and communication skills
• Experience in optimization initiatives such as role cleanup and cost/usage optimization

Responsibilities

• Lead and manage SAP Security and GRC programs across S/4HANA and SAP Cloud products
• Design, implement, and maintain SAP roles, authorizations, and security profiles aligned to business and compliance needs
• Run SoD analysis, drive remediation, and define/maintain mitigating controls with clear ownership and review cadence
• Oversee SAP GRC Access Control operations: ARA, EAM, ARM, BRM, and UAR
• Integrate SAP GRC with SAC, BTP, and Business Data Cloud via SAP IAG; maintain and improve integration
• Configure, maintain, and enhance GRC workflows and rule sets
• Support implementations of access and roles per corporate standards and policies
• Optimize security definitions, identify inefficiencies, and drive solutions; contribute to role cleanup per roadmap
• Support audits and provide timely evidence; ensure adherence to governance, risk, and compliance requirements
• Monitor and troubleshoot access issues across environments; partner with IT and business to resolve
• Mentor junior engineers; lead knowledge sharing and collaborate with Lead Engineer on technical plans
• Engage vendors and service providers to meet technical requirements and project deliverables
• Maintain comprehensive documentation of configurations, changes, and procedures; report risks with remediation recommendations