Job Title:  Manager | SAP Security & GRC AC | Bengaluru | SAP

Job requisition ID ::  100791
Date:  Mar 21, 2026
Location:  Bengaluru
Designation:  Manager
Entity:  Deloitte Touche Tohmatsu India LLP

Role Overview

We are seeking an experienced Manager – SAP Security & GRC Access Control to lead SAP Security operations, govern access management, and drive compliance initiatives across SAP landscapes (ECC/S/4HANA). The ideal candidate will manage end-to-end SAP security design, user administration, role governance, GRC AC workflows, audits, and risk remediation.

 

Key Responsibilities

SAP Security Leadership & Governance

  • Lead the SAP Security team handling provisioning, authorization design, and role maintenance.
  • Oversee role design, redesign, and SoD (Segregation of Duties) compliance across all SAP environments.
  • Ensure strong role governance, standardization, and documentation practices.
  • Act as the Security SME during implementations, upgrades, rollouts, and migrations.

GRC Access Control (AC) Management

  • Manage full lifecycle of SAP GRC AC modules:
  • Access Request Management (ARM)
  • Access Risk Analysis (ARA)
  • Emergency Access Management (EAM/Firefighter)
  • Business Role Management (BRM)
  • Maintain GRC rulebooks, mitigate risks, and administer firefighter IDs.
  • Monitor SoD risks and drive remediation plans with business and IT owners.

SAP Landscape & Integration Expertise

  • Manage security across multiple systems:
  • ECC / S/4HANA
  • BW/BI
  • EWM / TM
  • CRM / SRM
  • Fiori / Gateway
  • Ensure secure integration with non-SAP systems and interfaces.
  • Work closely with Basis, Functional, and Audit teams for cross-functional solutions.

Required Skills & Qualifications

  • Strong hands-on experience in ECC and/or S/4HANA Security concepts.
  • Expertise in:
  • User & role administration
  • SoD analysis & mitigation
  • GRC AC modules
  • SU24, PFCG, SUIM, ST01, ST22, and related tools
  • Deep understanding of SAP authorization concepts and access control frameworks.
  • Strong experience working with audits, compliance teams, and risk functions.
  • Ability to lead teams, run projects, and communicate with senior stakeholders.

Good to Have

  • Experience in S/4HANA migration projects.
  • Exposure to IDM, SAP Fiori Security, and cloud product security.
  • Working knowledge of SAP CPM, Ariba, SuccessFactors, or Concur Security.
  • SAP Security or GRC certification.

Education - Any graduate