Position: Senior SAP GRC Security & Authorization Consultant
Experience: 8+ Years
Location: Hyderabad(hybrid)
Notice Period: Immediate -15 Days
Job Summary
We are seeking an experienced Senior SAP GRC Security & Authorization Consultant with a minimum of 8 years of hands-on experience in SAP Security, Authorizations, and SAP GRC Access Control. The consultant will play a key role in designing and implementing SAP security for a greenfield SAP S/4HANA RISE Private Cloud implementation, ensuring compliance with SAP best practices, Segregation of Duties (SoD), governance, and regulatory requirements.
The ideal candidate should possess strong expertise in SAP authorization concepts, role design, SoD analysis, SAP GRC integration, and security governance across SAP landscapes.
________________________________________
Key Responsibilities
1. SAP Role Design & Authorization Architecture
• Design SAP Security Architecture for SAP S/4HANA RISE Private Cloud.
• Design and implement:
o Business Roles
o Single Roles
o Composite Roles
o Derived Roles
o System Roles
o Firefighter (Emergency Access) Roles
• Develop scalable and maintainable role design standards.
• Implement SAP security best practices following SAP recommendations.
• Create role naming conventions and governance standards.
• Ensure role design supports future organizational growth.
________________________________________
2. Segregation of Duties (SoD)
• Design and implement SAP recommended Segregation of Duties framework.
• Configure SAP GRC Access Control rulesets.
• Review and optimize SAP standard SoD rules.
• Develop custom SoD rules where business processes require.
• Perform:
o Risk Analysis
o Mitigation Control Design
o Sensitive Access Analysis
• Work closely with business process owners to define mitigation controls.
• Support compliance with:
o SOX
o Internal Audit
o ISO standards
o Corporate Governance requirements
________________________________________
3. SAP GRC Integration
• Configure and integrate SAP GRC Access Control with:
o SAP S/4HANA RISE Private Cloud
o SAP ECC (if applicable)
o SAP Fiori
o SAP Gateway
o SAP Business Technology Platform (BTP), where applicable
• Configure:
o Access Risk Analysis (ARA)
o Access Request Management (ARM)
o Emergency Access Management (EAM)
o Business Role Management (BRM)
• Coordinate with BASIS and infrastructure teams during GRC integration.
• Support system connectivity and RFC configurations.
________________________________________
4. Security Administration
• Manage user provisioning strategy.
• Define user lifecycle management processes.
• Support SAP Identity Management integrations (if applicable).
• Implement approval workflows.
• Develop authorization testing strategy.
• Support User Acceptance Testing (UAT).
________________________________________
5. Governance & Compliance
• Develop SAP Security Governance Framework.
• Conduct security reviews and health checks.
• Prepare security documentation.
• Support internal and external audits.
• Recommend improvements to reduce security risks.
• Ensure compliance with SAP security standards.
________________________________________
6. Project Responsibilities
• Participate in Fit-to-Standard workshops.
• Gather security requirements from business users.
• Work closely with:
o Functional Consultants
o BASIS Team
o Infrastructure Team
o Audit Team
o Business Process Owners
• Prepare effort estimates.
• Provide knowledge transfer to support teams.
• Mentor junior consultants.
________________________________________
Required Technical Skills
• SAP Security & Authorizations
• SAP S/4HANA Security
• SAP GRC Access Control 12.x
• SAP Fiori Security
• SAP Gateway Security
• SAP Business Roles
• Composite & Derived Roles
• SU24
• SU01
• PFCG
• STAUTHTRACE
• SU53
• ST01
• SAP Authorization Objects
• SAP Identity & Access Management concepts
• SoD Rule Design
• SAP Audit & Compliance
________________________________________
Preferred Skills
• SAP RISE Private Cloud implementation experience
• SAP BTP Security
• SAP IAS / IPS
• SAP Cloud Identity Services
• SAP Cloud Connector
• SAP Identity Management (IDM)
• SAP SuccessFactors integration (preferred)
• SAP Ariba security exposure (preferred)
________________________________________
Qualifications
• Bachelor's degree in Engineering, Computer Science, Information Technology, or related discipline.
• SAP Certification in SAP Security/GRC is highly preferred.
• Additional cybersecurity certifications (e.g., CISSP, CISA, or CISM) are an advantage.
________________________________________
Experience Required
• Minimum 8 years of SAP Security & Authorization experience.
• At least 2 full-cycle SAP S/4HANA implementation projects.
• Experience with SAP RISE Private Cloud implementations.
• Proven experience implementing SAP GRC Access Control in an on-premises environment integrated with SAP S/4HANA.
• Strong experience in designing enterprise-wide authorization concepts and SoD frameworks.
________________________________________
Key Deliverables
• SAP Security Strategy and Architecture
• Business Role Design
• System Role Design
• Composite and Derived Roles
• SAP Authorization Matrix
• Segregation of Duties (SoD) Matrix
• SAP GRC Access Control Configuration
• SAP GRC Integration with S/4HANA
• Security Testing Documentation
• Security Governance Framework
• User Provisioning Process
• Audit Compliance Documentation
• Security Runbook and Knowledge Transfer Documents
