We are seeking an experienced SAP Security and GRC professional to lead the SAP Authorizations function. You will be responsible for designing, maintaining, and governing SAP role concepts across ECC, S/4HANA, BW/4HANA, and cloud platforms. This is a hands-on leadership role requiring deep technical knowledge of SAP security combined with solid stakeholder and compliance management skills.

Key Responsibilities SAP Roles Authorization Management

- Design and maintain SAP roles Single, Composite, Derived, and AGR-based roles.
- Implement authorization concepts aligned with business requirements.
- Manage user administration (SU01), role transports, and authorization troubleshooting.
- Perform SU53, SU24, ST01, SUIM, and authorization trace analysis.
- Manage security for SAP ECC, S/4HANA, BW/4HANA, and SAP Fiori, including Single, Composite Derived roles via PFCG.
- Support S/4HANA Fiori security including Catalogs, Groups, Spaces Pages.
- Implement security best practices and audit controls; enforce least-privilege and secure role design principles.

Cloud Identity Integration
- Manage SAP Cloud Identity Authentication Service (IAS) and Identity Provisioning Service (IPS).
- Manage SAML/OAuth integrations with SAP BTP and cloud applications.

SAP GRC Access Control
- Administer SAP GRC Access Control modules: ARA, ARM, BRM, and EAM.
- Perform SoD risk analysis and implement mitigation controls; configure and maintain GRC rule sets.
- Manage Firefighter IDs and monitor EAM logs.
- Configure and support access request workflows and approval configurations.




- Conduct periodic access reviews and compliance reporting; integrate SAP systems with GRC Access Control.

Additional Responsibilities
- Act as deputy for the SAP Security Architect and other SAP Technology colleagues as required.
- Maintain up-to-date technical knowledge to drive continuous improvement aligned with IT strategy.

Required Skills
- 5+ years of hands-on SAP Security GRC experience.
- Strong expertise in SAP Roles Authorizations with PFCG role design methodology.
- Proven experience with SAP GRC Access Control.
- Experience with SAP Cloud Identity Services (IAS/IPS).
- Hands-on experience with S/4HANA and SAP Fiori authorizations.
- Strong knowledge of SoD controls and compliance frameworks.
- Experience integrating SAP with Active Directory / Azure AD.
- Understanding of SAP BTP security concepts.
- Experience in at least one S/4HANA implementation project, and in global, multi-system SAP environments.
- Strong English proficiency (spoken and written); German language skills are a significant advantage.
- Excellent communication skills, both technical and business-oriented; strong analytical and problem-solving abilities.

Good to Have
- SAP Security or GRC Certification.
- SAP BTP or Cloud Identity Certification.
- Experience in the manufacturing industry.

Disclaimer : This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.

📌 SAP Security Manager (Pune)
🏢 Kansoft Solutions
📍 Pune