SAP Security and GRC Lead Consultant

The Lead Consultant in SAP Security GRC Administration will be responsible for overseeing and managing the security and compliance aspects of the SAP system. They will play a crucial role in implementing, maintaining, and enhancing security controls within the SAP GRC environment to ensure the confidentiality, integrity, and availability of data.

Key Responsibilities

1. Design, configure, and administer sap security grc (governance, risk, and compliance) solutions.
2. Conduct regular security assessments, audits, and reviews to identify and mitigate risks.
3. Collaborate with cross functional teams to implement security best practices and policies.
4. Provide expertise in resolving security incidents and implementing security patches and upgrades.
5. Develop and deliver training programs to educate users on security protocols and procedures.

Skill Requirements

Experience

8–10 years of SAP Security and GRC experience with strong leadership exposure in SAP S/4HANA security, Fiori security, SAP GRC Access Control, access review, compliance, audit support, SAP security testing and SAP BTP security. Core SAP Security Skills Lead SAP Security operations and role design across SAP ECC, S/4HANA, Fiori, HANA, GRC and cloud-connected SAP landscapes. Lead role build and role redesign using task-based, business-process-aligned and least-privilege security principles. Resolve complex SAP authorization issues across business processes using trace tools, authorization objects, PFCG, SUIM, security tables and Fiori troubleshooting tools. Lead SAP S/4HANA and Fiori security design including business roles, technical roles, catalogs, groups, spaces, pages and launchpad authorization concepts. Define and review role design documents, access matrices, test scripts, cutover plans, SOPs and operational handover documents. Lead security testing, defect resolution, retesting, cutover support and go-live/hypercare security activities. Manage customer-facing security discussions, escalation calls, issue reviews and audit meetings. Additional Skills – GRC, Access Review, Testing, Migration, SaaS and BTP Lead SAP Security workstreams for ECC to S/4HANA migration, upgrade and transformation programs. Lead implementation and support of SAP GRC Access Control modules including ARA, ARM, EAM, BRM and UAR. Define and review SoD rulesets, mitigating controls, risk remediation strategies and access governance processes. Drive periodic access certifications, user access reviews, Firefighter reviews, audit reporting and compliance reviews. Conduct security assessments, access risk analysis, audit readiness reviews and control validation. Lead SAP BTP security setup including role collections, identity provider integration, authorization design and cloud access governance. Support SAP SaaS security model and access governance for SuccessFactors, Ariba, Concur, SAC, Datasphere, IBP, Fieldglass and other SAP cloud products. Coordinate with business, functional, Basis, integration, audit and compliance teams to close security and control issues. Provide technical guidance for S/4HANA upgrade, migration, conversion and post-go-live security stabilization.