Apply now »

Job Title:  Deputy Manager | SAP Security & GRC AC | Mumbai - Commerz III | SAP | DSA Metals, Mining and Industr

Job Description (JD) – SAP Security & GRC Consultant

Job Title: SAP Security & GRC Consultant

Experience: 5-12 Years (customizable)

Location: Flexible

Employment Type: Full-Time

Job Summary

We are seeking an experienced SAP Security & GRC Consultant responsible for designing, implementing, and supporting SAP Security and Governance, Risk & Compliance (GRC) solutions across SAP landscapes. The ideal candidate should possess deep expertise in SAP authorization concepts, role design, Segregation of Duties (SoD), Access Risk Analysis (ARA), Emergency Access Management (EAM), Access Request Management (ARM), and SAP S/4HANA security.

Key Responsibilities

SAP Security

  • Design, build, test, and maintain SAP security roles and authorizations across SAP systems.
  • Perform role redesign and optimization based on business requirements.
  • Manage user administration activities including user provisioning, de-provisioning, and access reviews.
  • Analyze and resolve authorization issues using SU53, ST01, SUIM, and trace tools.
  • Support SAP S/4HANA, ECC, BW, APO, CRM, BPC, Fiori, HANA, and cloud applications.
  • Ensure compliance with security policies and audit requirements.
  • Conduct periodic user access and role recertification reviews.

SAP GRC

  • Configure and support SAP GRC Access Control modules:
  • Access Risk Analysis (ARA)
  • Access Request Management (ARM)
  • Emergency Access Management (EAM)
  • Business Role Management (BRM)
  • User Access Review (UAR)
  • Perform Segregation of Duties (SoD) risk analysis and remediation.
  • Develop and maintain mitigation controls and risk rulesets.
  • Support GRC implementation, upgrades, and integration projects.
  • Collaborate with auditors and compliance teams during internal and external audits.
  • Prepare compliance reports and management dashboards.

Governance & Compliance

  • Support SOX and regulatory compliance requirements.
  • Perform security risk assessments and recommend remediation measures.
  • Participate in security audits and vulnerability assessments.
  • Develop security standards, procedures, and best practices.

Required Qualifications

  • Bachelor's degree in Computer Science, Information Technology, or related field.
  • 5+ years of SAP Security and GRC experience.
  • Strong understanding of SAP authorization concepts and role management.
  • Hands-on experience with SAP GRC Access Control 10.x/12.x.
  • Experience supporting SAP ECC and/or S/4HANA environments.
  • Knowledge of SoD, compliance frameworks, and audit processes.
  • Experience with Fiori security and SAP HANA authorizations.
  • Strong analytical and problem-solving skills.

Preferred Qualifications

  • Experience with SAP BTP Security and Identity Authentication Services (IAS/IPS).
  • Exposure to SAP Cloud applications (SuccessFactors, Ariba, Concur, SAC).
  • Knowledge of SAP IDM/IAG (Identity Access Governance).
  • SAP Security or SAP GRC certification.
  • Experience in global rollout and transformation programs.

Technical Skills

SAP Security

  • PFCG
  • SU01, SU24, SU53
  • ST01, STAUTHTRACE
  • SUIM
  • Fiori Catalogs & Groups
  • SAP HANA Security
  • S/4HANA Authorization Concept

SAP GRC

  • Access Control 10.1 / 12.0
  • ARA
  • ARM
  • EAM
  • BRM
  • UAR
  • Firefighter ID Management
  • SoD Risk Analysis

Key Competencies

  • Stakeholder Management
  • Communication Skills
  • Audit & Compliance Management
  • Problem Solving
  • Team Collaboration
  • Risk Assessment
  • Process Improvement

Apply now »