Job Details and Responsibilities

Summary:

This is a hands-on team leadership role, not a management role with a technical past. You will lead the SAP Security pod inside our managed services practice — owning SLA performance, quality and people development — while remaining genuinely technical and personally resolving the escalations your team cannot.

Expect the split to sit around 50/50 between hands-on delivery and leadership. If you are looking to step away from the systems, this is not the right role. If you want to lead a team without losing your technical edge, it is.

Responsibilities:

Technical leadership

● Acting as the final technical escalation point for SAP Security incidents across the client portfolio

● Personally resolving complex authorisation failures — trace analysis, root cause, permanent remediation

● Serving as design authority for role changes: reviewing and approving your team's work before it reaches production

● Owning the security design standard across accounts — naming conventions, derivation strategy, org level management, and ensuring it is actually followed

● Leading problem management and driving down repeat incident volume

● Owning the technical roadmap for the service — BTP adoption, automation opportunities, tooling improvements

Service ownership

● Owning SLA performance for the security queue: response, resolution, and backlog health

● Managing the shift and on-call rota, including coverage planning around holidays and absence

● Running the quality assurance process for production changes

● Reporting into monthly and quarterly client service reviews, presenting trends, risks and improvement plans

● Managing periodic user access recertification campaigns across clients — planning, execution, evidence and closure

● Overseeing GRC operational processes: firefighter log review, access risk analysis, mitigating control maintenance

● Acting as the security lead for client audits, internal and external

People leadership

● Line managing a pod of security consultants and associate consultants

● Running one-to-ones, objective setting, performance reviews and development planning





● Building capability deliberately — particularly moving associates from L1/L2 into genuine L3 competence

● Recruitment: interviewing, technical assessment, and onboarding new joiners

● Owning knowledge management for the pod: runbooks, knowledge articles, handover quality

Continual service improvement

● Identifying and delivering automation to reduce manual effort in provisioning and reporting

● Driving shift-left: moving resolution capability from senior consultants down to L1 and L2

● Contributing to pre-sales and scoping conversations for new managed services accounts

Qualifications

Experience:

● Minimum 15 years in SAP Security and Authorisations

● Proven experience leading a technical team in a managed services or application support workplace, with accountability for SLA performance

● Demonstrable, current SAP BTP security experience — IAS, IPS, XSUAA and role collection administration in a supported production context

● Deep S/4HANA and ECC role design expertise at scale, across multiple clients or a large multi-country landscape

● Strong Fiori authorisation experience end to end

● Hands-on SAP GRC Access Control, including operational ownership of AC processes

● SoD monitoring and remediation as an ongoing discipline, with direct audit exposure

● Genuine line management experience — you have run one-to-ones, handled underperformance, and developed people

● Confident client-facing communication, including presenting service performance to senior stakeholders

● Excellent written and spoken English

Desirable :

● ITIL v4 certification

● SAP Identity Management (IdM) or a third-party IGA tool (SailPoint, Saviynt)

● Cloud Identity Access Governance (IAG)

● HANA database security





● SuccessFactors, Ariba or Concur security models

● Experience building a security service from a small team upwards

● Automation and scripting applied to SAP security operations

● Pre-sales or bid support experience

● Regulated industry exposure — pharmaceutical, financial services, energy

● Relevant SAP certifications

Selected applicant will be subject to a background investigation, which will be conducted and the results of which will be used in compliance with applicable law.

Lemongrass Consulting is an Equal Opportunity employer. We do not discriminate on the basis of race, religion, color, national origin, religious creed, sex, gender, sexual orientation, gender identity, gender expression, age, genetic information, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics.

About Lemongrass

Lemongrass is a global SAP-focused Cloud services provider helping some of the world’s most recognized Enterprises modernize and transform their SAP environments. We combine deep technical expertise with automation, innovation, and AI to deliver meaningful business outcomes.

Our work spans SAP Cloud migrations, managed services, SAP Business Technology Platform (BTP), Business Data Cloud (BDC), and AI-enabled solutions. We help customers build clean core strategies, intelligent data foundations, and scalable Cloud operations across AWS, Microsoft Azure, Google Cloud Platform, and SAP Cloud ERP.

Founded in 2010, Lemongrass has grown into a trusted partner to SAP, AWS, Microsoft, and Google, earning top-tier partner designations along the way including SAP Gold Partner, Premier AWS Partner, Microsoft Gold Partner, and Google Cloud Partner. Our teams operate across the Americas, EMEA, and APAC, collaborating to solve complex challenges for global Enterprises.

At Lemongrass, you’ll work alongside Cloud architects, engineers, and innovators who are shaping the future of SAP in the Cloud—within a culture that values ownership, curiosity, collaboration, and continuous growth

📌 SAP Security Consultant (Team Leader) (India)
🏢 Lemongrass
📍 India