Job Title:  Consultant | SAP GRC PC | Mumbai | SAP

Job Description – SAP Security Consultant

Position Title: SAP Security Consultant

Location: Mumbai

1. Role Summary

The SAP Security Consultant is responsible for designing, implementing, reviewing, and managing SAP security solutions across S/4HANA and Fiori. The role ensures secure access, adherence to SoD principles, compliance with audit requirements, and smooth execution of security activities throughout all project phases.

2. Key Responsibilities

A. SAP Security Design & Build

• Design SAP roles using task‑based and activity‑based methodology

• Develop and manage roles for S/4HANA, Fiori, MM, SD, FI/CO modules

• Create and maintain authorization objects, roles, profiles, and catalogs

• Configure and manage Fiori catalogs, groups, spaces, and pages

• Maintain SU24 proposals and enrich authorization defaults

• Build and manage business roles and system/service user roles.

• Maintain security across SAP GUI, Fiori Launchpad, and OData services

B. Role Review & Compliance

• Review roles periodically to ensure least‑privilege access and SoD compliance

• Detect and remediate over‑authorizations or conflict‑prone roles

• Ensure alignment with audit guidelines and documentation standards

• Ensure adherence to naming conventions, governance rules, and security design principles

C. Security Troubleshooting

• Resolve authorization errors using SU53, SU56, ST01, and STAUTHTRACE

• Troubleshoot Fiori issues such as blank screens, metadata errors, and service activation failures

• Coordinate with Basis for transport movement, cache refreshes, SICF activation, and OData validations

• Analyse system logs (SM20, SM21, ST22) to identify and address security gaps

3. Required Skills & Competencies

Technical Skills

• Strong experience in SAP Security for ECC and S/4HANA

• Working knowledge of SAP Fiori Launchpad & app‑level security

• Understanding of OData services, CDS views, and SAP UI5 security concepts

• Knowledge of Basis–Security dependencies: SICF, PFCG, SU24, STAUTHTRACE

• Strong understanding of Segregation of Duties (SoD) and audit frameworks

Education: B.tech or BE