SAP Security, GRC Access Control and Identity Management Specialist Scope

SAP S/4HANA on RISE, SAP GRC, SAP IDM, SAP BTP, Ariba, SuccessFactors, BW and integrated SAP platforms

Seniority

Senior Analyst / Consultant / Specialist / Lead, depending on experience

Role Type

SAP Security, GRC, IDM and Access Governance

Role Summary

We are looking for an experienced SAP Security, GRC and Identity Access Management skilled to manage end-to-end SAP user access, role design, identity lifecycle, access governance, emergency access, risk analysis, audits and security operations across a complex SAP landscape. The role will support SAP S/4HANA on RISE, SAP GRC Access Control, SAP GRC Process Control, SAP IDM, SAP BTP, SAP Ariba, SAP SuccessFactors, SAP BW/BW4HANA and other integrated SAP applications.

The candidate will be responsible for SAP user management, SAP role design and maintenance, GRC operations, access risk analysis, SAP Firefighter governance, user access review implementation, quarterly access reviews, risk ruleset management, SoD remediation support, country rollouts, SAP native security assessments and audit support. The role requires strong process discipline, documentation quality and audit-ready execution across run, change and project activities.

Landscape

SAP S/4HANA on RISE, SAP GRC AC/PC,



SAP IDM, SAP BTP, Ariba, SuccessFactors, SAP BW/BW4HANA and related integrations

Detailed Responsibilities SAP User Access Management

- Create, modify, maintain and revoke SAP user access using approved access request, provisioning and governance processes.

SAP Role Management
- Own role requirement gathering, role design, build, testing, transport, go-live and ongoing maintenance.

SAP GRC Access Control Management
- Administer GRC Access Control processes across ARA, EAM, ARM and access governance workflows.

SAP GRC Process Control
- Support quarterly CCM updates, control monitoring, exception validation and control evidence management.

SAP IDM
- Manage identity lifecycle workflows, provisioning, deprovisioning, reconciliation and connector issue resolution.

Access Reviews and Audits
- Implement and operate user access reviews, firefighter reviews, audit evidence packs and remediation tracking.

Risk Ruleset Management
- Design, maintain, test and govern SoD and critical access rulesets for SAP and integrated applications.

SAP Native Security
- Assess SAP authorization, user, privileged access, RFC, technical user and security configuration risks.

📌 Senior SAP GRC Consultant (Bengaluru)
🏢 EY
📍 Bengaluru