Job Title - SAP S/4HANA Security Consultant
Experience Required - 8+ Years

Work Mode: Remote

Moving from SAP ECC to SAP S/4HANA 2025 Edition.

We are seeking a senior SAP S/4HANA Security Consultant to work on the security workstream for our brownfield migration.

This person will own security impact analysis, role redesign, Fiori and HANA security implementation, and SoD/risk management using Security Weaver (Pathlock) as the primary governance tool. Experience with SAP GRC Access Control is also acceptable where Security Weaver exposure is limited.

Core Requirements (Must)

Minimum 2 3 full lifecycle ECC S/4HANA brownfield migration projects (hands-on conversion experience).

Direct, hands-on execution of SU25 (Phases 1 4) and role retrofit activities during conversion.

Fiori security implementation experience: catalogues, groups, business roles, OData activation, SICF.

Enterprise role redesign and remediation at scale (analysis and remediation of 1,000+ roles preferred).

SAP Readiness Check and Simplification Item Catalogue impact analysis experience.

Hands-on experience with Security Weaver (Pathlock) OR SAP GRC Access Control for SoD analysis, simulation, remediation, and reporting.

Solid understanding of SoD rule design and risk mitigation strategy during ECC S/4 transitions.

Key Responsibilities

Lead SAP security strategy and execution for ECC S/4HANA transformation (brownfield conversion).

Perform role impact analysis, cleanup, and remediation; execute SU25 conversion steps and validate role behavior in S/4.

Design and implement a Fiori-first security model (catalogues, groups, business roles) and secure OData/SICF services.

Configure and manage Security Weaver (Pathlock)



controls; alternatively align SAP GRC rule sets where applicable.

Migrate SoD rule sets and control frameworks from ECC to S/4; define interim compensating controls.

Conduct workshops with functional teams (FI/CO/MM/SD/EWM), Basis, Development, and Audit to validate security models.

Support cutover, security testing, and post-go-live authorisation validation and stabilisation.

Preferred Qualifications

8+ years of SAP Security experience (ECC and S/4HANA).

Proven track record in 2+ ECC S/4HANA brownfield conversions.

Experience with Security Weaver (Pathlock) strongly preferred.

SAP GRC Access Control experience in complex enterprise environments.

Experience working in SOX/ITGC-regulated environments and preparing audit evidence.

Strong communication skills and ability to lead cross-functional workshops.

While sharing the profile of your resource, share the details below, too, along with the LinkedIn ID

1

Overall Years of Experience

2

Relevant Experience

3

SAP Security Overall Experience

/10

4

SAP ECC Security

/10

5

SAP S/4HANA Security

/10

6

ECC S/4HANA Brownfield Migration

/10

7

Full Lifecycle Migration Projects

/10

8

SU25 Phases 1 4

/10

9

Role Retrofit & Conversion Activities

/10

10

Enterprise Role Redesign & Remediation

/10

11

Large-Scale Role Analysis (1,000+ Roles)

/10

12

SAP Fiori Security

/10

13

Fiori Catalogs, Groups & Business Roles

/10

14

OData Service Security & Activation

/10

15

SICF Services

/10

16

SAP Readiness Check

/10

17

Simplification Item Catalog Analysis

/10

18

Security Weaver / Pathlock

/10

19

SAP GRC Access Control

/10

20

SoD Analysis, Simulation & Remediation

/10

21

SoD Rule Design & Risk Mitigation

/10

22

SOX / ITGC / Audit Compliance

📌 AP S/4HANA Security Consultant (India)
🏢 Sparix Global
📍 India