Position Summary Experienced SAP Security & GRC professional with over 15+ years of expertise in SAP Security, Role Design, Governance Risk & Compliance (GRC), and enterprise access control. Proven track record in leading end-to-end SAP implementations, global security transformations, and S/4HANA security design across complex landscapes. Key Responsibilities SAP Security & Role Management Lead design and implementation of SAP Security architecture across ECC, S/4HANA, BW/4HANA, Ariba, IBP, Success Factors, and BTP environments Design and maintain enterprise role matrix aligned with business processes and regulatory requirements Develop single, composite, and derived roles using PFCG and authorization concepts Design authorization concept for S/4HANA systems including Fiori tile-based access Prepare Fiori security design, catalog mapping, and role assignment strategy Support S/4HANA implementation security strategy
SAP GRC AC, IAG and Cloud Security Implementation & Governance Implement SAP GRC Access Control modules including ARA, ARM, BRM, EAM, and UARDesign and configure SOD rule sets and risk mitigation controls Build risk and control matrices aligned with SOX and internal audit requirements Implement emergency access management (Firefighter IDs) and monitor logs Implement IAG for Ariba, IBP, Success Factors, and BTP cloud applications Implement SAP Identity Access Governance (IAG) services including Access Request, Access Analysis, Access Certification Configure custom rule sets for cloud applications Enable hybrid access governance between on-prem and cloud SAP systems Support privileged access management
GRC Process Control, Audit & Risk Management Risk Framework Development: Establish risk catalogs, assess risk likelihood and financial impact, and define risk mitigation strategies within the SAP platform. Control Design & Automation: Map business processes, design internal controls (SOX, Segregation of Duties), and configure Automated Continuous Control Monitoring (CCM). Testing & Remediation: Manage control self-assessments, evaluate control effectiveness, track testing evidence, and address identified deficiencies. Audit & Reporting: Generate compliance dashboards, maintain control documentation, and assist internal/external auditors with compliance reviews. Workflow Configuration: Set up roles, notifications, and approval workflows for surveys, testing, and issue resolution.
Key Skills SAP Security (ECC, S/4HANA, BW/4HANA, Fiori, BTP, ARIBA, IBP), SAP GRC (AC, PC, RM), SAP IAG, Success Factors RBP, CUA, SOX Compliance, IT Audit, SOD Management.