Sap Grc Security

SAP Security Consultant / SAP GRC Consultant

• SAP security design, implementation, and support across multiple S/4HANA landscapes
• SAP user administration, role lifecycle management, and authorisation troubleshooting
• Strong knowledge of SAP authorisation concepts (roles, profiles, users, transports)
• Hands-on experience with SAP GRC Access Control (ARA, EAM, ARM)
• Design and maintenance of SoD rulesets, risk analysis, mitigation controls, and compliance reporting
• S/4HANA role redesign and simplification using business role concepts
• Understanding of SAP HANA and Fiori security concepts at an integration level
• Implementation of CI/CD and DevSecOps security best practices for SAP landscapes
• Secure role and transport management within automated deployment pipelines
• Integration of SAP systems with security tooling such as Security-Bridge
• Vulnerability monitoring, secure configuration, and code security oversight
• Knowledge of Privileged Access Management (PAM) solutions, including CyberArk
• Documentation of SAP security controls, processes, and role designs
• Identification and remediation of security risks in complex SAP environments
• Conduct SAP security assessments, analyse system configurations and authorizations and remediate security findings
• Strong collaboration with Basis, Development, Functional, and Security teams
• Clear communication of security risks, controls, and remediation options