Technical Specialist

Job Summary

"The SAP Security & GRC Lead Consultant is responsible for designing, implementing, and managing SAP security and Governance, Risk, and Compliance (GRC) solutions to ensure secure, compliant, and efficient access to SAP systems across the enterprise. Managing SSO using Identity Authentication Service and provisioning between IAS & BTP using Identity Provisioning service. Designing and implementing GRC AC Firefighter workflow and ruleset.

Key Responsibilities:

Security Administration
Design and implement role-based access control (RBAC), including business roles, technical roles, derived and composite roles, Fiori catalogs, and OData service authorizations.
Ensure Segregation of Duties (SoD) compliance across the landscape.
Expertise in S/4HANA on-premises security design and implementation, aligned with SOX requirements, including mapping to GRC risk rules and access request workflows.
Perform ruleset design, risk analysis execution, and remediation planning.
Conduct role remediation in line with compliance requirements.

GRC Access Control:

SAP GRC Access Control (AC), Emergency access Management implementation experience. Setting up Workflow, Firefighter ID, Owner and controller.
Define and maintain risk rulesets as per the compliance requirements.
Perform risk analysis on User and role and able to do remediation.
Establish mitigation controls across S/4 Hana and documentation
IAM Integration
ntegration of GRC Access control, S/4 Hana, BTP and S/4 Hana private cloud with IAM solution i.e. Saviynt which is used for Joiner, leave and mover process.
BTP
Configure users and role collections at the BTP subaccount level and manage access to applications deployed within the subaccount.
Experience with SAP Cloud Identity Services (IAS/IPS), including setting up identity directories.
Configure SSO, conditional authentication, enable federation with corporate Id Ps (e.g., Azure AD) via IAS.
Set up Identity Provisioning Service (IPS) integrations between:
CIS ↔ BTP
CIS ↔ Success Factors
Enable automated user provisioning and access assignment within SAP BTP."

Key Responsibilities

"The SAP Security & GRC Lead Consultant is responsible for designing, implementing, and managing SAP security and Governance, Risk, and Compliance (GRC) solutions to ensure secure, compliant, and efficient access to SAP systems across the enterprise. Managing SSO using Identity Authentication Service and provisioning between IAS & BTP using Identity Provisioning service. Designing and implementing GRC AC Firefighter workflow and ruleset.

Key Responsibilities:

Security Administration
Design and implement role-based access control (RBAC), including business roles, technical roles, derived and composite roles, Fiori catalogs, and OData service authorizations.
Ensure Segregation of Duties (SoD) compliance across the landscape.
Expertise in S/4HANA on-premises security design and implementation, aligned with SOX requirements, including mapping to GRC risk rules and access request workflows.
Perform ruleset design, risk analysis execution, and remediation planning.
Conduct role remediation in line with compliance requirements.

GRC Access Control:

SAP GRC Access Control (AC), Emergency access Management implementation experience. Setting up Workflow, Firefighter ID, Owner and controller.
Define and maintain risk rulesets as per the compliance requirements.
Perform risk analysis on User and role and able to do remediation.
Establish mitigation controls across S/4 Hana and documentation
IAM Integration
ntegration of GRC Access control, S/4 Hana, BTP and S/4 Hana private cloud with IAM solution i.e. Saviynt which is used for Joiner, leave and mover process.
BTP
Configure users and role collections at the BTP subaccount level and manage access to applications deployed within the subaccount.
Experience with SAP Cloud Identity Services (IAS/IPS), including setting up identity directories.
Configure SSO, conditional authentication, enable federation with corporate Id Ps (e.g., Azure AD) via IAS.
Set up Identity Provisioning Service (IPS) integrations between:
CIS ↔ BTP
CIS ↔ Success Factors
Enable automated user provisioning and access assignment within SAP BTP."

Skill Requirements

"The SAP Security & GRC Lead Consultant is responsible for designing, implementing, and managing SAP security and Governance, Risk, and Compliance (GRC) solutions to ensure secure, compliant, and efficient access to SAP systems across the enterprise. Managing SSO using Identity Authentication Service and provisioning between IAS & BTP using Identity Provisioning service. Designing and implementing GRC AC Firefighter workflow and ruleset.

Key Responsibilities:

Security Administration
Design and implement role-based access control (RBAC), including business roles, technical roles, derived and composite roles, Fiori catalogs, and OData service authorizations.
Ensure Segregation of Duties (SoD) compliance across the landscape.
Expertise in S/4HANA on-premises security design and implementation, aligned with SOX requirements, including mapping to GRC risk rules and access request workflows.
Perform ruleset design, risk analysis execution, and remediation planning.
Conduct role remediation in line with compliance requirements.

GRC Access Control:

SAP GRC Access Control (AC), Emergency access Management implementation experience. Setting up Workflow, Firefighter ID, Owner and controller.
Define and maintain risk rulesets as per the compliance requirements.
Perform risk analysis on User and role and able to do remediation.
Establish mitigation controls across S/4 Hana and documentation
IAM Integration
ntegration of GRC Access control, S/4 Hana, BTP and S/4 Hana private cloud with IAM solution i.e. Saviynt which is used for Joiner, leave and mover process.
BTP
Configure users and role collections at the BTP subaccount level and manage access to applications deployed within the subaccount.
Experience with SAP Cloud Identity Services (IAS/IPS), including setting up identity directories.
Configure SSO, conditional authentication, enable federation with corporate Id Ps (e.g., Azure AD) via IAS.
Set up Identity Provisioning Service (IPS) integrations between:
CIS ↔ BTP
CIS ↔ Success Factors
Enable automated user provisioning and access assignment within SAP BTP."

Other Requirements

"The SAP Security & GRC Lead Consultant is responsible for designing, implementing, and managing SAP security and Governance, Risk, and Compliance (GRC) solutions to ensure secure, compliant, and efficient access to SAP systems across the enterprise. Managing SSO using Identity Authentication Service and provisioning between IAS & BTP using Identity Provisioning service. Designing and implementing GRC AC Firefighter workflow and ruleset.

Key Responsibilities:

Security Administration
Design and implement role-based access control (RBAC), including business roles, technical roles, derived and composite roles, Fiori catalogs, and OData service authorizations.
Ensure Segregation of Duties (SoD) compliance across the landscape.
Expertise in S/4HANA on-premises security design and implementation, aligned with SOX requirements, including mapping to GRC risk rules and access request workflows.
Perform ruleset design, risk analysis execution, and remediation planning.
Conduct role remediation in line with compliance requirements.

GRC Access Control:

SAP GRC Access Control (AC), Emergency access Management implementation experience. Setting up Workflow, Firefighter ID, Owner and controller.
Define and maintain risk rulesets as per the compliance requirements.
Perform risk analysis on User and role and able to do remediation.
Establish mitigation controls across S/4 Hana and documentation
IAM Integration
ntegration of GRC Access control, S/4 Hana, BTP and S/4 Hana private cloud with IAM solution i.e. Saviynt which is used for Joiner, leave and mover process.
BTP
Configure users and role collections at the BTP subaccount level and manage access to applications deployed within the subaccount.
Experience with SAP Cloud Identity Services (IAS/IPS), including setting up identity directories.
Configure SSO, conditional authentication, enable federation with corporate Id Ps (e.g., Azure AD) via IAS.
Set up Identity Provisioning Service (IPS) integrations between:
CIS ↔ BTP
CIS ↔ Success Factors
Enable automated user provisioning and access assignment within SAP BTP."