Required Skills & Experience
Required Experience
- 5+ years of experience in SAP Security or related Information Security roles
- Proven experience in user access administration, role design, segregation of duties analysis, and audit support
- Hands-on experience with SAP ECC and/or S/4HANA security models Essential skills
- Strong expertise in SAP user and role administration, profile generator (PFCG), and authorization concepts
- Knowledge of GRC Access Control modules including Access Risk Analysis (ARA), Emergency Access Management (EAM), and Access Request Management (ARM)
- Experience with audit and compliance frameworks such as SOX, GDPR, and PCI-DSS
- Familiarity with SAP Security Patch Management, Security Notes, and vulnerability assessments
- Ability to conduct security testing, troubleshoot authorization issues, and develop mitigation strategies
- Exposure to SAP Fiori security and authorization concepts
- Understanding of SAP HANA database privileges and native security objects
- Familiarity with cloud-based SAP systems, including SAP BTP
- Experience with SIEM tools, log monitoring, or integration with enterprise security platforms
- Ability to work in Agile environments and collaborate across global teams Roles & Responsibilities
- Design and implement role-based access control (RBAC) strategies for SAP environments
- Maintain and enhance user provisioning workflows, role catalogues, and access governance controls
- Perform security testing, access audits, and remediation activities
- Review and apply SAP security patches and updates in a timely and controlled manner
- Collaborate with internal audit and compliance teams to ensure alignment with regulatory requirements
- Provide technical guidance and resolution on SAP security issues and incidents
- Support access certification campaigns, SOD analysis, and quarterly audit reporting
- Maintain documentation for SAP security design, policies, and user support procedure
Job Description
Seeking an SAP Security & GRC Consultant with 4 - 6 years of experience in SAP Security, SAP GRC Access Control (ARA, ARM, EAM & BRM), SoD analysis, Role design, MSMP/BRF+ workflows and S/4HANA/Fiori security.
Candidate should be capable of independently handling implementation, support, audits and GRC compliance activities.
Key Responsibilities:
SAP Security
· Design and maintain SAP roles and authorizations across SAP systems. · Create and manage Single, Composite and Derived Roles. · Perform security reviews and access audits. · Support SAP Fiori and S/4 HANA security concepts. · Understanding of business processes such as Procure-to-Pay (P2P), Order-to-Cash (O2C) and Record-to-Report (R2R).
SAP GRC
· Configure and support SAP GRC Access Control modules:
o Access Risk Analysis (ARA) o Access Request Management (ARM) o Emergency Access Management (EAM) o Business Role Management (BRM) · Perform Segregation of Duties (SoD) analysis and risk remediation. · Manage firefighter ID’s, mitigating controls and access reviews. · Support GRC workflows (MSMP) and BRF+ configurations. Participate in GRC implementation, upgrade and enhancement projects.
Pay Rate: $11-$14 an hour depending on Skills and Experience