SAP GRC Security HANA lead

Key Responsibilities

1. SAP Security Design & Build

• Design, develop, and maintain security roles in SAP ECC / S/4HANA (ABAP stack), including Single, Composite, and Derived roles.
• Build and manage SAP security concepts based on organizational structures, functional requirements, and SoD principles.
• Configure and support Fiori catalog, group, and role authorization setup.
• Implement security baseline and hardening activities across SAP systems.

2. SAP BTP & Cloud Security

• Design and manage SAP BTP role collections, IAS/IPS configuration, and identity lifecycle integrations.
• Support platform-level access management across BTP subaccounts, Cloud Foundry orgs, and spaces.
• Troubleshoot BTP application access issues, authentication flows, and identity propagation.
• Assist in enabling audit logs, security monitoring, and governance for SAP BTP landscapes.

3. Troubleshooting & Operations

• Analyze and resolve authorization failures across ABAP, Fiori, BTP, and cloud applications.
• Support user provisioning and access issue resolution in integrated landscapes (e.g., IAS, IPS, IAG, GRC AC).
• Perform SU53, STAUTHTRACE, SUIM analysis and provide root cause resolution.
• Coordinate with functional, development, and BASIS teams for end-to-end issue closure.

4. Governance, Compliance & SoD

• Conduct Segregation of Duties (SoD) analysis and support remediation activities.
• Work with GRC or IAG tools for Role Risk Analysis, firefighter access controls, and periodic review processes.
• Ensure compliance with internal and industry security standards, security baselines, and audit requirements.

5. Project Support & Documentation

• Participate in security blueprinting, requirement gathering workshops, and solution design discussions. (Tools used in JIRA, SolDoc, ChaRM)
• Create and maintain detailed documentation: role design, process flows, security standards, and operational runbooks.
• Support security deliverables across project phases: build, testing, deployment, hypercare.