Experience /n 15+ years SAP experience with 10+ years in SAP Security & GRC and at least 5 years in Architect / Advisory roles. /n Role Summary /n We are seeking a highly experienced and dynamic SAP Security & GRC Architect to lead enterprise-wide SAP Security, Governance, Risk, and Compliance strategy initiatives for global customers. This role is not a support or administration position. The successful candidate will act as a trusted advisor Customer and business leadership teams, helping define security roadmaps, governance frameworks, target operating models, and transformation strategies across SAP landscapes. /n The ideal candidate should possess deep expertise across SAP ECC, S/4HANA, SAP BTP, SAP Fiori, SAP GRC, Cloud Platforms, Identity Governance, and emerging SAP security technologies while being capable of translating business and regulatory requirements into scalable and secure SAP architectures. /n Key Responsibilities /n Security Strategy & Architecture /n /n

- Define enterprise SAP Security and GRC strategy aligned with business and cyber-security objectives.

/n

- Design target-state SAP Security architectures for ECC, S/4HANA, RISE with SAP, SAP BTP, SAP SAC, Ariba, SuccessFactors, MDG, IBP and other SAP solutions.

/n

- Develop security transformation roadmaps for SAP modernization programs.

/n

- Lead SAP Security assessments, maturity reviews, and governance workshops.

/n

- Establish SAP Security standards, policies, and enterprise design principles.

/n /n Governance, Risk & Compliance /n /n

- Define enterprise Segregation of Duty (SoD) frameworks and risk strategies.

/n





- Design and govern SAP GRC Access Control solutions (ARA, ARM, EAM, BRM).

/n

- Establish SAP controls aligned with SOX, ITGC, GDPR, ISO27001, NIST, and internal audit requirements.

/n

- Lead compliance and audit engagements with internal and external auditors.

/n

- Provide strategic recommendations for risk reduction and governance optimization.

/n /n S/4HANA & Cloud Security /n /n

- Design security models for S/4HANA transformations and RISE with SAP environments.

/n

- Define security architecture for SAP BTP services, cloud integrations, APIs, and extensions.

/n

- Develop Fiori security concepts, catalog design strategy, and role architecture.

/n

- Drive SAP Identity and Access Management transformation initiatives.

/n /n Advisory & Consulting /n /n

- Serve as Security Design Authority for customer programs.

/n

- Conduct executive-level workshops with customer leadership.

/n

- Translate regulatory requirements into practical SAP security controls.

/n

- Provide thought leadership on industry trends, SAP roadmap direction, and emerging risks.

/n

- Support RFPs, solutioning, estimations, due diligence, and customer presentations.

/n /n Operating Model & Governance /n /n





- Design enterprise SAP Security operating models.

/n

- Establish governance structures, RACI matrices, and control ownership.

/n

- Define KPIs, compliance reporting, and security health frameworks.

/n

- Implement continuous improvement programs across SAP Security and GRC functions.

/n /n Leadership /n /n

- Mentor architects, leads, and security consultants.

/n

- Build reusable frameworks, accelerators, and best practices.

/n

- Collaborate with Cyber Security, IAM, Audit, Risk, Infrastructure, and SAP Platform teams.

/n /n Required Qualifications /n /n

- 15+ years SAP experience with 10+ years in SAP Security & GRC and at least 5 years in Architect / Advisory roles.

/n

- Deep expertise in SAP authorization concepts (PFCG, SU24, org-level design), Fiori/S/4HANA catalog- and space-based security, and HANA DB security.

/n

- Robust hands-on background (past or current) with SAP GRC Access Control 10.x/12.x (ARA, ARM, EAM, BRM) and exposure to SAP IAG / Cloud Identity services.

/n

- Proven experience designing SoD rulesets, role architectures, and access governance models at enterprise scale.

/n

- Demonstrated experience in at least one full-cycle S/4HANA security design (greenfield, brownfield, or bluefield).

/n

- Solid understanding of audit and compliance frameworks: SOX, ITGC, ISO 27001, NIST; comfortable owning audit conversations.

/n

- Ability to communicate complex security concepts to executives and non-technical stakeholders; strong documentation and presentation skills.

/n

📌 SAP Security & GRC Architect (Strategic Design & Transformation) (Lucknow)
🏢 HCLTech
📍 Lucknow