SAP GRC Lead Consultant

Allstate India is looking for an experienced SAP S/4HANA Security GRC Consultant who can partner with our global teams to drive secure, scalable, and compliant SAP solutions. The ideal candidate brings strong expertise across SAP GRC Access Control, Fiori, SoD, S/4HANA Security, and HANA Database Security with hands-on experience in end-to-end implementations and auditing. You will collaborate closely with functional, technical, and compliance teams to design solutions, remediate risks, and enhance the overall SAP security posture supporting enterprise-wide digital transformation initiatives.

• End-to-End GRC implementations (minimum 2 full life cycles)
• Activate BC Sets, IMG nodes, and SICF services for AC, PC, RM
• Configure connectors, connector groups, EUPs, MSMP workflows, and BRF+ rules
• Develop initiator/agent/routing rules, mitigation controls, and customized risk/function IDs
• Design and maintain Fiori rulesets for GRC-Fiori integration
• Configure integration scenarios (SUPMG, AUTH, ROLEMG, PROV)
• Manage synchronization jobs, password self-service, and role methodology
• Integrate GRC with HANA DB for provisioning and risk analysis

• Design and build SoD risk rulesets including Fiori and HANA-specific rulesets
• Support SoD cleanup, remediation, and role redesign initiatives
• Review GRC configuration, ruleset coverage, and mitigation controls
• Support RACM design/review and audit readiness for SAP landscapes

• Design Spaces Pages aligned to business roles
• Activate OData services, SICF nodes, and semantic objects
• Maintain target mappings for custom apps
• Troubleshoot Fiori issues across logs (IWFND/IWBEP, browser console)
• Support Fiori App Support framework for faster issue resolution
• Lead migrations from distributed to embedded Fiori architectures
• Redesign Fiori landscapes replacing Groups with Spaces/Pages

• Manage table access using SE54 and map authorization groups
• Execute SU24, SU25 activities and maintain system security policies
• Restrict program access using RSCSAUTH, S_PROGRAM/S_PROGNAM
• Create and maintain BW Analysis Authorizations
• Perform CUA administration
• Drive ECC S/4HANA migration security tasks
• Support compliance audits for ERP and S/4HANA
• Execute mass-security activities via SECATT, LSMW, GUI scripting
• Configure S/4HANA UI Masking Logging for GDPR compliance

• Create and maintain SQL, Analytic, Package, System Application privileges
• Restrict access to DB objects (schemas, views, tables, procedures)
• Manage users (standard restricted) and security parameters
• Work with HANA views (Analytic, Attribute, Calculation)
• Create and transport HANA packages using Delivery Units

• Understanding of SAP functional processes and business flows
• Experience in SAP SaaS solutions like IAS/IPS, Ariba and Fieldglass security
• Experience designing GRC/IAG risk rulesets for cloud/Fiori applications

• Strong communication, analytical and problem-solving skills
• Ability to work in a global, agile environment
• Passion for secure design and continuous improvement

• Defect Resolution, ERP Applications, Functional Designs, Integration Testing, Issue Management, SAP Governance Risk Compliance Access Control (SAP GRC AC) (Inactive), SAP Governance Risk and Compliance (SAP GRC)

Shift B (India)