SAP GRC and Security Consultant

Key Responsibilities

• Implement, configure, and support SAP GRC Access Control solutions.
• Work on SAP GRC Access Control modules, including Access Risk Analysis (ARA), Access Request Management (ARM), Business Role Management (BRM), Emergency Access Management (EAM), and User Access Review (UAR).
• Perform Segregation of Duties (SoD) analysis, risk assessment, and mitigation activities.
• Configure and maintain SAP security roles, authorization objects, profiles, and user access permissions.
• Manage user provisioning, access requests, role assignments, and approval workflows.
• Configure and support Emergency Access Management (Firefighter) functionality, including controller assignments and log reviews.
• Conduct access risk analysis and resolve authorization conflicts in accordance with organizational security policies.
• Support SAP GRC integration with SAP ECC, SAP S/4HANA, and other relevant SAP systems.
• Troubleshoot SAP GRC issues related to connectors, repository synchronization, user provisioning, and access workflows.
• Perform periodic user access reviews, compliance assessments, and security audits.
• Coordinate with functional, technical, audit, and compliance teams to resolve security-related issues.
• Prepare and maintain security documentation, risk analysis reports, audit evidence, and mitigation plans.
• Support SAP GRC upgrades, enhancements, testing, and production support activities.
• Ensure adherence to internal controls, regulatory requirements, and enterprise security standards.

Required Skills and Qualifications

• Strong hands-on experience in SAP GRC Access Control and SAP Security.
• Good knowledge of SAP authorization concepts, roles, profiles, and user administration.
• Experience with SoD risk analysis, risk remediation, and mitigating controls.
• Hands-on knowledge of SAP GRC configuration and access request workflows.
• Experience in Firefighter ID administration and Emergency Access Management.
• Understanding of SAP ECC and SAP S/4HANA security concepts.
• Knowledge of SAP GRC integration, connectors, and user provisioning.
• Experience in incident management, troubleshooting, testing, and production support.
• Good communication, analytical, and problem-solving skills.
• Ability to work with audit, compliance, and cross-functional teams.

Mandatory Skills

SAP GRC Access Control, SAP Security, Access Risk Analysis (ARA), Access Request Management (ARM), Segregation of Duties (SoD), Emergency Access Management (EAM), Firefighter, SAP Roles and Authorizations, User Provisioning, SAP ECC/S/4HANA Security