SAP Security, GRC & Fiori Security Consultant – Job Description

- Design, implement, and maintain SAP Security roles and authorizations across SAP ECC, S/4HANA, BW, CRM, SCM, and related SAP applications.
- Perform user administration activities including user provisioning, modifications, deactivation, and access reviews in compliance with security policies.
- Develop and maintain single, composite, derived, and master roles based on business requirements and segregation of duties principles.
- Conduct SAP authorization analysis and troubleshooting using tools such as SU53, ST01, SUIM, PFCG, and security audit logs.
- Implement and support SAP GRC Access Control modules including Access Risk Analysis (ARA), Access Request Management (ARM), Emergency Access Management (EAM), and Business Role Management (BRM).
- Perform Segregation of Duties (SoD) risk analysis, remediation, mitigation control reviews, and compliance reporting.
- Collaborate with business stakeholders, auditors, and functional teams to ensure security controls meet regulatory and organizational requirements.
- Support internal and external audits by providing security documentation, user access reports, role design evidence, and compliance assessments.
- Design and maintain SAP Fiori security architecture, including catalogs, groups/spaces, pages, business roles, and OData service authorizations.
- Configure and troubleshoot SAP Gateway and Fiori Launchpad security issues,



including activation of OData services and ICF services.
- Perform security testing and validation for SAP upgrades, enhancement packs, support packs, and transformation projects such as ECC to S/4HANA migrations.
- Analyze and optimize role design to ensure least-privilege access while improving operational efficiency and reducing security risks.
- Develop and maintain security standards, operating procedures, documentation, and governance processes for SAP environments.
- Support SAP Identity and Access Management integrations, including IDM, IAS, IPS, and third-party provisioning solutions.
- Participate in project lifecycle activities including requirement gathering, security design, testing, cutover support, and post-go-live stabilization.

Additional Responsibilities – SAP BTP Security

- Design and manage SAP BTP security concepts, including global accounts, subaccounts, role collections, and authorization assignments.
- Configure and support SAP Identity Authentication Service (IAS), Identity Provisioning Service (IPS), Single Sign-On (SSO), and federated identity integrations within SAP BTP.
- Implement and monitor security controls for SAP BTP services, ensuring compliance with enterprise security standards, user access governance, and cloud security best practices

If interested, please share CV on [email protected]

📌 SAP Security Consultant (Bengaluru)
🏢 DEFT360 IT Solutions
📍 Bengaluru