SAP Security Consultant

SAP Security, GRC & Fiori Security Consultant – Job Description

• Design, implement, and maintain SAP Security roles and authorizations across SAP ECC, S/4HANA, BW, CRM, SCM, and related SAP applications.
• Perform user administration activities including user provisioning, modifications, deactivation, and access reviews in compliance with security policies.
• Develop and maintain single, composite, derived, and master roles based on business requirements and segregation of duties principles.
• Conduct SAP authorization analysis and troubleshooting using tools such as SU53, ST01, SUIM, PFCG, and security audit logs.
• Implement and support SAP GRC Access Control modules including Access Risk Analysis (ARA), Access Request Management (ARM), Emergency Access Management (EAM), and Business Role Management (BRM).
• Perform Segregation of Duties (SoD) risk analysis, remediation, mitigation control reviews, and compliance reporting.
• Collaborate with business stakeholders, auditors, and functional teams to ensure security controls meet regulatory and organizational requirements.
• Support internal and external audits by providing security documentation, user access reports, role design evidence, and compliance assessments.
• Design and maintain SAP Fiori security architecture, including catalogs, groups/spaces, pages, business roles, and OData service authorizations.
• Configure and troubleshoot SAP Gateway and Fiori Launchpad security issues, including activation of OData services and ICF services.
• Perform security testing and validation for SAP upgrades, enhancement packs, support packs, and transformation projects such as ECC to S/4HANA migrations.
• Analyze and optimize role design to ensure least-privilege access while improving operational efficiency and reducing security risks.
• Develop and maintain security standards, operating procedures, documentation, and governance processes for SAP environments.
• Support SAP Identity and Access Management integrations, including IDM, IAS, IPS, and third-party provisioning solutions.
• Participate in project lifecycle activities including requirement gathering, security design, testing, cutover support, and post-go-live stabilization.

Additional Responsibilities – SAP BTP Security

• Design and manage SAP BTP security concepts, including global accounts, subaccounts, role collections, and authorization assignments.
• Configure and support SAP Identity Authentication Service (IAS), Identity Provisioning Service (IPS), Single Sign-On (SSO), and federated identity integrations within SAP BTP.
• Implement and monitor security controls for SAP BTP services, ensuring compliance with enterprise security standards, user access governance, and cloud security best practices

If interested, please share CV on [email removed]