SAP Security and GRC Lead Consultant

Job Summary

We are seeking an experienced SAP Security Consultant with strong expertise in S/4HANA Public Cloud. The role involves implementing, managing, and supporting SAP security and authorization processes while ensuring compliance with clean core principles and cloud security best practices.

Key Responsibilities

• Design, implement, and manage SAP Security roles and authorizations in S/4HANA Public Cloud

• Create and maintain business roles, catalogs, and groups in SAP Fiori

• Manage user provisioning, de-provisioning, and access controls

• Configure and maintain Role-Based Access Control (RBAC)

• Ensure compliance with audit, SOX, and security policies

• Work with Identity and Access Management (IAM) and GRC tools

• Support user access issues, troubleshooting and root cause analysis

• Perform periodic user access reviews and risk assessments

• Collaborate with functional teams for role design aligned to business processes

• Support SIT, UAT, audits, and documentation

Skill Requirements

Must Have

• 6–8 years of SAP Security experience

• Strong expertise in SAP roles and authorizations

• Experience in S/4HANA Security (Public Cloud preferred)

• Hands-on experience with Fiori roles, catalogs, and groups

• Knowledge of GRC Access Control and audit compliance

• Experience with user administration and role design

• Understanding of segregation of duties (SoD) concepts

• Strong troubleshooting and issue resolution skills

Good to Have

• Experience with SAP BTP Security and Identity Services

• Exposure to IAS/IPS configurations

• Knowledge of SAP Cloud Identity and access governance

• Experience with SAP Security audits and compliance frameworks

• SAP Security Certification

Other Requirements

Soft Skills

• Strong communication and stakeholder management

• Analytical and problem-solving skills

• Ability to work in global delivery models

• Client-facing experience preferred

Public Cloud Specific Expectations

• Work with SAP standard roles and minimal customization

• Understanding of clean core security principles

• Knowledge of upgrade-safe role design and security configurations

• Familiarity with quarterly upgrades and cloud compliance standards