SAP Security Consultant

Required Skills & Experience
Required Experience
▪ 5+ years of experience in SAP Security or related Information Security roles
▪ Proven experience in user access administration, role design, segregation of duties
analysis, and audit support
▪ Hands-on experience with SAP ECC and/or S/4HANA security models
Essential skills
▪ Strong expertise in SAP user and role administration, profile generator (PFCG), and
authorization concepts
▪ Knowledge of GRC Access Control modules including Access Risk Analysis (ARA),
Emergency Access Management (EAM), and Access Request Management (ARM)
▪ Experience with audit and compliance frameworks such as SOX, GDPR, and PCI-DSS
▪ Familiarity with SAP Security Patch Management, Security Notes, and vulnerability
assessments
▪ Ability to conduct security testing, troubleshoot authorization issues, and develop
mitigation strategies
▪ Exposure to SAP Fiori security and authorization concepts
▪ Understanding of SAP HANA database privileges and native security objects
▪ Familiarity with cloud-based SAP systems, including SAP BTP
▪ Experience with SIEM tools, log monitoring, or integration with enterprise security
platforms
▪ Ability to work in Agile environments and collaborate across global teams
Roles & Responsibilities
▪ Design and implement role-based access control (RBAC) strategies for SAP
environments
▪ Maintain and enhance user provisioning workflows, role catalogues, and access
governance controls
▪ Perform security testing, access audits, and remediation activities
▪ Review and apply SAP security patches and updates in a timely and controlled manner
▪ Collaborate with internal audit and compliance teams to ensure alignment with
regulatory requirements
▪ Provide technical guidance and resolution on SAP security issues and incidents
▪ Support access certification campaigns, SOD analysis, and quarterly audit reporting
▪ Maintain documentation for SAP security design, policies, and user support procedure
Job Description
Seeking an SAP Security & GRC Consultant with 4 - 6 years of experience in SAP Security, SAP GRC Access Control (ARA, ARM, EAM & BRM), SoD analysis, Role design, MSMP/BRF+ workflows and S/4HANA/Fiori security.
Candidate should be capable of independently handling implementation, support, audits and GRC compliance activities.
Key Responsibilities:
SAP Security
· Design and maintain SAP roles and authorizations across SAP systems.
· Create and manage Single, Composite and Derived Roles.
· Perform security reviews and access audits.
· Support SAP Fiori and S/4 HANA security concepts.
· Understanding of business processes such as Procure-to-Pay (P2P), Order-to-Cash (O2C) and Record-to-Report (R2R).
SAP GRC
· Configure and support SAP GRC Access Control modules:
o Access Risk Analysis (ARA)
o Access Request Management (ARM)
o Emergency Access Management (EAM)
o Business Role Management (BRM)
· Perform Segregation of Duties (SoD) analysis and risk remediation.
· Manage firefighter ID’s, mitigating controls and access reviews.
· Support GRC workflows (MSMP) and BRF+ configurations.
Participate in GRC implementation, upgrade and enhancement projects.

Work arrangement
No