Your work profile

- Lead SAP IAG security discovery workshops with business, IT, and security stakeholders to understand access requirements, organizational structures, and governance processes.
- Design and implement SAP IAG security solutions for SAP S/4HANA Cloud and hybrid SAP landscapes.
- Define and configure business roles, business role templates, access assignments, and role ownership models aligned with business and security requirements.
- Translate business and compliance requirements into appropriate role design, access controls, and approval workflows.
- Configure and manage SAP IAG access request, approval, provisioning, and access review processes.
- Design and maintain Segregation of Duties (SoD) and critical access controls, including risk analysis and mitigation processes.
- Perform access risk analysis and investigate access violations, false positives, and authorization-related issues.
- Support integration of SAP IAG with SAP S/4HANA Cloud, SAP IAS, SAP IPS, SAP SuccessFactors, and other SAP/cloud applications.
- Support hybrid IAM scenarios involving SAP IAG and SAP GRC Access Control, including integration, synchronization, and governance processes.
- Define role naming conventions, ownership models, access request processes, and security governance standards.
- Work with Business Process Owners and functional teams to identify appropriate business roles and organizational restrictions.
- Support user lifecycle and access provisioning activities, including joiner, mover, and leaver processes.
- Troubleshoot authorization, provisioning, synchronization, and access-related issues across integrated SAP systems.
- Support testing activities including unit testing, SIT, UAT, regression testing, and security validation.




- Prepare security design documents, role matrices, process flows, test scenarios, and operational procedures.
- Lead project activities, manage stakeholders, mentor junior consultants, and support project delivery and financial management.

Key skills required

- Experience in SAP Security with robust hands-on experience in SAP Identity Access Governance (IAG) and cloud-based SAP security.
- Experience in SAP S/4HANA Cloud, particularly SAP S/4HANA Cloud Public Edition, and understanding of its business role and authorization concepts.
- Strong understanding of SAP IAG architecture, configuration, administration, and access governance capabilities.
- Experience designing and managing business roles, business role templates, access assignments, role owners, and approval workflows in SAP IAG.
- Strong understanding of SAP authorization concepts, authorization objects, organizational fields, restrictions, and least-privilege access.
- Experience with SoD and Critical Access Risk Analysis, risk rule configuration, risk remediation, and mitigation.
- Knowledge of SAP Cloud Identity Services – Identity Authentication (IAS) and Identity Provisioning (IPS) and their role in SAP identity and access management.
- Experience with SAP IAG integration with S/4HANA Cloud and other SAP applications.




- Knowledge of SAP SuccessFactors integration and hybrid IAG scenarios, including identity synchronization and provisioning.
- Understanding of SAP GRC Access Control and experience supporting IAG–GRC hybrid landscapes.
- Ability to analyze business processes and translate them into appropriate business roles and access restrictions.
- Experience in troubleshooting authorization, provisioning, synchronization, and access-related issues.
- Understanding of SAP security governance, access certification, periodic access reviews, and compliance requirements.
- Ability to lead security workshops and communicate effectively with business stakeholders, process owners, architects, and technical teams.
- Proficient in leading a team, managing delivery activities, and supporting project financials.
- Ability to communicate clearly and effectively in a timely manner.

Required Skills

- Education – Any graduate.
- Strong experience in SAP IAG / SAP Cloud Security.
- Experience with SAP S/4HANA Cloud Public Edition, Business Roles, and Fiori security.
- Hands-on experience with SAP IAG access requests, role management, access analysis, SoD, and access reviews.
- Knowledge of SAP IAS, IPS, and SAP Cloud Identity Services.
- Experience with SAP IAG and GRC integration/hybrid security scenarios.
- Understanding of SAP SuccessFactors and identity provisioning/integration concepts.
- Strong knowledge of SAP authorization and role design principles.
- Excellent communication and stakeholder management skills.
- Strong analytical and problem-solving abilities.
- Ability to work collaboratively with clients, functional teams, architects, and internal security teams.

📌 SAP GRC & Security - IAG (Bengaluru)
🏢 Deloitte
📍 Bengaluru