SAP Security GRC Implementation Specialist

JD-

Design, configure, and maintain SAP Identity Access Governance (IAG) integrating it with Success Factor / Identity Access Services for user hire-to-retire. Manage end-to-end integration and provisioning flows between SAP Cloud Identity Services (IAS/IPS) and target cloud/on-premise applications (e.g., SAP S/4HANA, SuccessFactors, Ariba). Support and optimize bridge scenarios between SAP GRC Access Control (AC) on-premise and SAP IAG cloud solutions using hybrid landscape architectures. Lead daily operational support, troubleshooting provisioning failures, system connection errors, job scheduling issues, and synchronization bottlenecks within IAG and IAS/IPS. Design, update, and maintain business roles and technical roles across various SAP cloud environments while ensuring strict alignment with least-privilege principles. Configure and maintain the IAG Risk Analysis engine, incorporating custom SoD rulesets and mitigating controls tailored to organizational risk appetites. Manage user lifecycle events (onboarding, offboarding, transfers) within SAP Cloud Identity Authentication (IAS) and Identity Provisioning (IPS), including custom attribute mappings and transformations. Perform standard SAP Security operations, including user administration, role maintenance (PFCG), and troubleshooting authorization issues in core SAP S4 systems . Will require deep understanding of Fiori catalogs and pages /spaces /groups. Participate in stakeholder meetings and provide SAP security solutions for S4 deployments across the globe.

Areas of responsibility Monitoring and Incident Detection-Analyse attack trends and correlate logs across systems to identify advance threats. Enhance monitoring processes and implement improvements for faster detection, to ensure compliance with security frameworks and regulatory standards. Incident Handling and Analysis-Perform root cause analysis, create incident response plans and implement disaster recovery measures to minimize business disruption Threat Assessment and Analytics-Undertake forensic analysis using advanced analytics tools and implement mitigation measures to align with compliance requirements. Stakeholder Coordination and Audit Assistance-"Liaise with cross functional teams, external vendors and auditors to ensure compliance with security frameworks. Maintain audit documentation and ensure its accuracy while implementing processes that support audit readiness and continuous compliance." Training and Awareness-Assist in creating and delivering cybersecurity awareness sessions, including guidance on phishing and malicious emails.