Job Description

Your work profile

n

n
- Lead SAP IAG security discovery workshops with business, IT, and security stakeholders to understand access requirements, organizational structures, and governance processes.
n
- Design and implement SAP IAG security solutions for SAP S/4HANA Cloud and hybrid SAP landscapes.
n
- Define and configure business roles, business role templates, access assignments, and role ownership models aligned with business and security requirements.
n
- Translate business and compliance requirements into appropriate role design, access controls, and approval workflows.
n
- Configure and manage SAP IAG access request, approval, provisioning, and access review processes.
n
- Design and maintain Segregation of Duties (SoD) and critical access controls, including risk analysis and mitigation processes.
n
- Perform access risk analysis and investigate access violations, false positives, and authorization-related issues.
n
- Support integration of SAP IAG with SAP S/4HANA Cloud, SAP IAS, SAP IPS, SAP SuccessFactors, and other SAP/cloud applications.
n
- Support hybrid IAM scenarios involving SAP IAG and SAP GRC Access Control, including integration, synchronization, and governance processes.
n
- Define role naming conventions, ownership models, access request processes, and security governance standards.
n
- Work with Business Process Owners and functional teams to identify appropriate business roles and organizational restrictions.
n
- Support user lifecycle and access provisioning activities, including joiner, mover, and leaver processes.
n
- Troubleshoot authorization, provisioning, synchronization, and access-related issues across integrated SAP systems.
n
- Support testing activities including unit testing, SIT, UAT, regression testing,



and security validation.
n
- Prepare security design documents, role matrices, process flows, test scenarios, and operational procedures.
n
- Lead project activities, manage stakeholders, mentor junior consultants, and support project delivery and financial management.
n

n

Key skills required

n

n
- Experience in SAP Security with strong hands-on experience in SAP Identity Access Governance (IAG) and cloud-based SAP security.
n
- Experience in SAP S/4HANA Cloud, particularly SAP S/4HANA Cloud Public Edition, and understanding of its business role and authorization concepts.
n
- Strong understanding of SAP IAG architecture, configuration, administration, and access governance capabilities.
n
- Experience designing and managing business roles, business role templates, access assignments, role owners, and approval workflows in SAP IAG.
n
- Strong understanding of SAP authorization concepts, authorization objects, organizational fields, restrictions, and least-privilege access.
n
- Experience with SoD and Critical Access Risk Analysis, risk rule configuration, risk remediation, and mitigation.
n
- Knowledge of SAP Cloud Identity Services – Identity Authentication (IAS) and Identity Provisioning (IPS) and their role in SAP identity and access management.
n
- Experience with SAP IAG integration with S/4HANA Cloud and other SAP applications.
n




- Knowledge of SAP SuccessFactors integration and hybrid IAG scenarios, including identity synchronization and provisioning.
n
- Understanding of SAP GRC Access Control and experience supporting IAG–GRC hybrid landscapes.
n
- Ability to analyze business processes and translate them into appropriate business roles and access restrictions.
n
- Experience in troubleshooting authorization, provisioning, synchronization, and access-related issues.
n
- Understanding of SAP security governance, access certification, periodic access reviews, and compliance requirements.
n
- Ability to lead security workshops and communicate effectively with business stakeholders, process owners, architects, and technical teams.
n
- Proficient in leading a team, managing delivery activities, and supporting project financials.
n
- Ability to communicate clearly and effectively in a timely manner.
n

n

Required Skills

n

n
- Education – Any graduate.
n
- Strong experience in SAP IAG / SAP Cloud Security.
n
- Experience with SAP S/4HANA Cloud Public Edition, Business Roles, and Fiori security.
n
- Hands-on experience with SAP IAG access requests, role management, access analysis, SoD, and access reviews.
n
- Knowledge of SAP IAS, IPS, and SAP Cloud Identity Services.
n
- Experience with SAP IAG and GRC integration/hybrid security scenarios.
n
- Understanding of SAP SuccessFactors and identity provisioning/integration concepts.
n
- Solid knowledge of SAP authorization and role design principles.
n
- Excellent communication and stakeholder management skills.
n
- Strong analytical and problem-solving abilities.
n
- Ability to work collaboratively with clients, functional teams, architects, and internal security teams.
n

📌 SAP GRC & Security - IAG (Bengaluru)
🏢 Deloitte
📍 Bengaluru