SAP Security & GRC Consultant – CIS / IAS / IPS

Job Summary
We are seeking an experienced (4-7 years) SAP Security & GRC Consultant (L2 Support) with hands-on expertise in SAP S/4HANA Security, SAP GRC Access Control and SAP Cloud Identity Services (CIS), including Identity Authentication Service (IAS) and Identity Provisioning Service (IPS). The candidate will be responsible for supporting SAP security operations, user administration, role management, compliance monitoring, and access governance activities in a complex enterprise environment.
Key Responsibilities
SAP Security Administration
· Perform user administration activities including user creation, modification, lock/unlock, and deletion.
· Manage SAP authorization concepts across SAP landscapes.
· Design, build, modify, and maintain single, composite, and derived roles.
· Has a Strong Troubleshooting and resolve authorization issues and access-related incidents.
· Execute role assignments and transport security objects across environments.
· Conduct security audits and compliance reviews.
SAP GRC Access Control
· Support SAP GRC Access Control modules including:
· Access Risk Analysis (ARA)
· Access Request Management (ARM)
· Emergency Access Management (EAM)
· Business Role Management (BRM)
· Analyze Segregation of Duties (SoD) conflicts and recommend mitigation controls.
· Support firefighter ID management and emergency access monitoring.
· Review and maintain mitigating controls documentation.
SAP S/4HANA Security
· Support S/4HANA security implementation and operational activities.
· Manage Fiori security, catalogs, groups/spaces, pages, and business roles.
· Troubleshoot Fiori authorization issues using standard SAP tools.
· Support security requirements for SAP Fiori, SAP GUI, and embedded applications.
· Work with business and functional teams to design secure access solutions.
SAP IAS / IPS / CIS skills
· SAP Cloud Identity Services (CIS)
· SAP Identity Authentication Service (IAS)
· SAP Identity Provisioning Service (IPS)
· Single Sign-On (SAML 2.0, OIDC)
· Microsoft Entra ID / Azure AD Federation
· User Provisioning & De-provisioning
· SAP SuccessFactors Integration
· SAP Ariba Identity Management
· Identity Lifecycle Management
· Authentication & Access Governance
· Troubleshooting IAS/IPS Sync and SSO Issues
Incident & Service Management
· Handle L2 support tickets within defined SLAs.
· Perform root cause analysis for recurring security issues.
· Coordinate with L3 teams for complex security incidents.
· Participate in system upgrades, patching, and project-related security activities.
· Prepare operational reports and security dashboards.
Required Skills
· Strong experience in SAP Security and Authorizations.
· Hands-on experience with SAP GRC Access and Process Control
· Experience supporting SAP S/4HANA environments.
· SAP IAS/IPS/CIS knowledge is a big plus
· Good understanding of:
o Role Design and Role Maintenance
o User Administration
o SoD Analysis and Compliance
o Fiori Security Concepts
o Security Audits and Controls
o Experience with transport management and security troubleshooting.
o Knowledge of SAP Basis concepts related to security.
o Familiarity with ITIL processes and ticketing tools such as ServiceNow, Jira, or Remedy.
Preferred Skills
· Experience with S/4HANA, SAP GRC and SAP IAS/IPS/CIS projects and operations
· Exposure to SAP BTP security concepts.
· Knowledge of SAP SuccessFactors, SAP BW/4HANA, SAP Ariba, or SAP MDG, Salesforce security.
· SAP Security and/or SAP GRC certifications preferred.

Work arrangement
No