Job Title:  Manager | SAP Security & GRC AC | Mumbai | SAP

Job requisition ID ::  104407
Date:  May 20, 2026
Location:  Mumbai
Designation:  Manager
Entity:  Deloitte South Asia LLP

Your potential, unleashed. 

 

India’s impact on the global economy has increased at an exponential rate and Deloitte presents an opportunity to unleash and realise your potential amongst cutting edge leaders, and organisations shaping the future of the region, and indeed, the world beyond. 

 

At Deloitte, your whole self to work, every day. Combine that with our drive to propel with purpose and you have the perfect playground to collaborate, innovate, grow, and make an impact that matters. 

 

The team 
 
 

Enterprise technology has to do much more than keep the wheels turning; it is the engine that drives 

functional excellence and the enabler of innovation and long-term growth. Learn more about ET&P 

 

Your work profile 

 

The primary role is to make immediate, direct contributions to strengthening clients’ security, internal controls, and risk posture during SAP ECC to S/4HANA migration and transformation programs, while enabling business agility and compliance. 

To do this, you will perform the following activities within the firm: 

  • Define and own the SAP Security, Authorizations, and Controls conversion scope, objectives, timelines, and delivery roadmap for ECC to S/4HANA migration programs. 

  • Build and lead a crossfunctional security and controls team comprising SAP Security consultants, SAP GRC specialists, Basis teams, and IAM/compliance stakeholders. 

  • Design and govern the S/4HANA security and role architecture, including transformation from ECC transactionbased roles to S/4HANA and Fioribased business roles. 

  • Create and manage securityspecific project plans, including risk and issue registers aligned with overall program milestones. 

  • Partner with business process owners, Internal Audit, Risk, Compliance, and IT Governance teams to define access requirements, approvals, and SoD controls. 

  • Ensure compliance with SAP best practices for S/4HANA security, including SAP Activate methodology, role redesign, Fiori authorization concepts, and GRC integration. 

  • Define and oversee Segregation of Duties (SoD), critical access, and emergency access (Firefighter) frameworks during migration, testing, cutover, and hypercare. 

  • Lead security testing activities across unit testing, SIT, UAT, and regression cycles, validating role assignments, authorization behavior, and Fiori tile access. 

  • Govern cutover and golive security readiness, including temporary access controls, migration user governance, and postgolive stabilization. 

  • Support internal and external audits by providing control documentation, evidence, and walkthroughs for the S/4HANA security environment. 

 

Desired qualifications 

  • Bachelor’s degree in Information Systems, Computer Science, Engineering, Business Administration, or a related field. 

  • SAP Security, SAP GRC, or relevant IAM certifications are preferred. 

  • Willingness to travel for shortterm or longterm client assignments as required. 

  • Strong written and verbal communication skills. 

 

Required experience 

  • 7–10+ years of SAP Security and Controls experience, with at least 3 years leading ECC to S/4HANA security or GRC workstreams. 

  • Proven experience in ECC to S/4HANA system conversion, brownfield, or selective transition programs. 

  • Strong handson knowledge of:  

  • SAP ECC and S/4HANA authorization concepts 

  • SAP Fiori security and business role design 

  • SAP GRC Access Control (SoD, Access Risk Analysis, Firefighter) 

 

Your role as a Manager  

At Deloitte, we expect our professionals to live our purpose by addressing what matters most—for our clients, our people, and society. 

You will be expected to demonstrate: 

  • Inspiring leadership with integrity and inclusion 

  • Clientcentric delivery excellence and risk management 

  • Strong collaboration across business and technology teams 

  • Strategic thinking and structured problem solving 

  • Ability to influence senior stakeholders and drive decisions 

  • Analytical acumen for access risk assessment and controls design 

  • Techsavviness in applying secure and ethical technology practices 

  • Empathetic leadership, fostering a safe and inclusive environment 

 

How you’ll grow 

 

Connect for impact 

 

Our exceptional team of professionals across the globe are solving some of the world’s most complex business problems, as well as directly supporting our communities, the planet, and each other. Know more in our Global Impact Report and our India Impact Report. 

 

Empower to lead 

 

You can be a leader irrespective of your career level. Our colleagues are characterised by their ability to inspire, support, and provide opportunities for people to deliver their best and grow both as professionals and human beings. Know more about Deloitte and our One Young World partnership. 

 

Inclusion for all 

 

At Deloitte, people are valued and respected for who they are and are trusted to add value to their clients, teams and communities in a way that reflects their own unique capabilities. Know more about everyday steps that you can take to be more inclusive.At Deloitte, we believe in the unique skills, attitude and potential each and every one of us brings to the table to make an impact that matters.