SAP GRC Security Consultant

SAP Security

• Design, build, and maintain SAP security roles and authorizations.
• Perform user administration activities including user creation, modification, locking, and deletion.
• Ensure compliance with SAP security standards and company policies.
• Support SAP ECC, S/4HANA, BW, CRM, SRM, Fiori, and other SAP applications.

SAP GRC Access Control

• Implement and support SAP GRC Access Control modules:
• Access Risk Analysis (ARA)
• Access Request Management (ARM)
• Emergency Access Management (EAM)
• Business Role Management (BRM)
• Configure and maintain Segregation of Duties (SoD) rulesets.
• Analyze access risks and propose mitigation controls.
• Manage firefighter IDs and monitor emergency access logs.

Compliance & Audit Support

• Participate in internal and external audits.
• Prepare audit documentation and evidence.
• Conduct periodic user access reviews and role recertification.
• Ensure compliance with SOX, GDPR, and other regulatory requirements.

Role Design & Security Optimization

• Design single, composite, and derived roles.
• Perform role remediation and authorization troubleshooting.
• Conduct SU53 and ST01 analysis for authorization issues.
• Support security requirements during SAP implementation and enhancement projects.

Risk Management

• Identify segregation of duties conflicts.
• Recommend risk mitigation strategies.
• Collaborate with business teams to resolve compliance issues.

Required Skills & Qualifications

• Bachelor's degree in Computer Science, Information Technology, or related field.
• 4+ years of experience in SAP Security and SAP GRC.
• Strong knowledge of SAP authorization concepts.
• Experience with SAP GRC Access Control 10.x/12.0.
• Hands-on experience in:
• PFCG
• SU01
• SU24
• SU53
• ST01
• AGR Tables
• Knowledge of SoD concepts and compliance frameworks.
• Experience working with SAP ECC and/or SAP S/4HANA environments.
• Strong analytical and problem-solving skills.

Preferred Qualifications

• SAP Security or SAP GRC certification.
• Experience with SAP Fiori Security.
• Knowledge of SAP BTP Security and Identity Access Governance (IAG).
• Experience in SAP HANA Database Security.
• Exposure to SAP SuccessFactors, Ariba, or SAP Cloud solutions.

Key Competencies

• Access Risk Analysis
• SAP Security Administration
• Role Design & Authorization Management
• Segregation of Duties (SoD)
• Audit & Compliance Management
• Incident Resolution
• Stakeholder Management
• Documentation and Reporting