BENGALURU · FULLTIME
Senior SAP Security IAM Consultant
Ernst Young
Bengaluru · onsite · Posted 5d ago
Sourced from
Undisclosed4–7 yrsfulltimeBengaluru
Your match
?
Sign in to see your match score, skill gaps & tailored resume.
Section · 01
About this role
Job Summary
We are looking for an experienced SAP Security, GRC and Identity Access Management professional to manage end-to-end SAP user access, role design, identity lifecycle, access governance, emergency access, risk analysis, audits and security operations across a complex SAP landscape. The role will support SAP S/4HANA on RISE, SAP GRC Access Control, SAP GRC Process Control, SAP IDM, SAP BTP, SAP Ariba, SAP SuccessFactors, SAP BW/BW4HANA and other integrated SAP applications.
The candidate will be responsible for SAP user management, SAP role design and maintenance, GRC operations, access risk analysis, SAP Firefighter governance, user access review implementation, quarterly access reviews, risk ruleset management, SoD remediation support, country rollouts, SAP native security assessments and audit support. The role requires strong process discipline, documentation quality and audit-ready execution across run, change and project activities.
Scope SAP S/4HANA on RISE, SAP GRC, SAP IDM, SAP BTP, Ariba, SuccessFactors, BW and integrated SAP platforms
Role Type SAP Security, GRC, IDM and Access Governance
Seniority Senior Analyst / Consultant / Specialist / Lead, depending on experience
Primary Focus User access management, role lifecycle, GRC operations, IDM provisioning, risk ruleset management, audits and access reviews
Landscape SAP S/4HANA on RISE, SAP GRC AC/PC, SAP IDM, SAP BTP, Ariba, SuccessFactors, SAP BW/BW4HANA and related integrations
Key Accountability Areas - SAP User Access Management: Create, modify, maintain and revoke SAP user access using approved access request, provisioning and governance processes.
- SAP Role Management: Own role requirement gathering, role design, build, testing, transport, go-live and ongoing maintenance.
- SAP GRC Access Control: Administer GRC Access Control processes across ARA, EAM, ARM and access governance workflows.
- SAP GRC Process Control: Support quarterly CCM updates, control monitoring, exception validation and control evidence management.
- SAP IDM: Manage identity lifecycle workflows, provisioning, deprovisioning, reconciliation and connector issue resolution.
- Access Reviews and Audits: Implement and operate user access reviews, firefighter reviews, audit evidence packs and remediation tracking.
- Risk Ruleset Management: Design, maintain, test and govern SoD and critical access rulesets for SAP and integrated applications.
- SAP Native Security: Assess SAP authorization, user, privileged access, RFC, technical user and security configuration risks.
- SAP User Access Management
- Manage SAP user ID creation, modification, lock, unlock, validity updates, role assignment, termination and periodic user maintenance across SAP systems.
- Support access provisioning and deprovisioning through SAP IDM and SAP GRC Access Control workflows.
- Handle access requests, emergency requests, weekend releases and production access support activities.
- Ensure access is provisioned based on approved requests, business need, least privilege and segregation of duties requirements.
- Maintain user master data, license-relevant user classifications, technical users, communication users and validity controls.
- SAP Role Management
- Design, build, test and maintain SAP security roles for SAP S/4HANA, ECC, BW, Fiori, BTP integrations and related SAP platforms.
- Perform role requirement gathering with business process owners, functional teams, control owners and country rollout teams.
- Translate business requirements into authorization concepts, role matrices, derived roles, composite roles and Fiori catalogs, groups, spaces or pages.
- Own the role lifecycle from requirement gathering, design, build and unit testing through UAT, defect remediation, transport movement, go-live and hypercare.
- Support role redesign, role cleanup, SoD reduction, access optimization and country-specific role rollout activities.
- SAP GRC Access Control Management
- Administer SAP GRC Access Control modules including Access Risk Analysis, Emergency Access Management, Access Request Management and Business Role Management where applicable.
- Configure and support GRC workflows, approval paths, request types, provisioning settings, connectors and access request exceptions.
- Perform access risk analysis for users, roles, access requests and role changes.
- Monitor and resolve GRC provisioning failures, workflow issues, connector errors and control exceptions.
- Support integrated access governance across SAP S/4HANA, BW, Ariba, SuccessFactors, BTP and other connected applications.
- SAP GRC ARA and Risk Ruleset Management
- Manage SAP GRC ARA risk analysis for users, roles, profiles, critical transactions and sensitive authorization combinations.
- Design, update and maintain SAP risk rulesets including risks, functions, actions, permissions and mitigating controls.
- Perform ruleset impact assessment, regression testing and approval tracking before production deployment.
- Coordinate SoD risk remediation, mitigation control assignment and risk owner sign-off.
Sourced from naukri
Let the agent run this one for you.
Tailored resume, auto-apply, and referral lookup — in under 2 minutes.
Section · 02
Skills
Access Managementbusiness processcompliance reportingBusiness RequirementsauditsAudit SupportCapital Marketsdeploymentcontinuous control monitoringControl ManagementcloudCloud ApplicationsAdministrationcompliance
Section · Company
About Ernst & Young
Ernst Young
Management Consulting
44k+
employees
2002
24 years old
Gurgaon / Gurugram, Haryana
India
₹15.3L PA avg
Avg at Ernst & Young
About
At EY, our purpose is Building a better working world. The insights and quality services we provide help build trust and confidence in the capital markets and in economies the world over.
Industries
Management Consulting
Employee ratings
10 reviews
3.4/ 5
Culture
1.9
Career growth
2.3
Work-life
2.5
Employees rate it well for
Job Security36Skill Development35
Find them on