Required Skills & Experience

Required Experience

▪ 5+ years of experience in SAP Security or related Information Security roles

▪ Proven experience in user access administration, role design, segregation of duties

analysis, and audit support

▪ Hands-on experience with SAP ECC and/or S/4HANA security models

Essential skills

▪ Solid expertise in SAP user and role administration, profile generator (PFCG), and

authorization concepts

▪ Knowledge of GRC Access Control modules including Access Risk Analysis (ARA),

Emergency Access Management (EAM), and Access Request Management (ARM)

▪ Experience with audit and compliance frameworks such as SOX, GDPR, and PCI-DSS

▪ Familiarity with SAP Security Patch Management, Security Notes, and vulnerability

assessments

▪ Ability to conduct security testing, troubleshoot authorization issues, and develop

mitigation strategies

▪ Exposure to SAP Fiori security and authorization concepts

▪ Understanding of SAP HANA database privileges and native security objects

▪ Familiarity with cloud-based SAP systems, including SAP BTP

▪ Experience with SIEM tools, log monitoring, or integration with enterprise security

platforms

▪ Ability to work in Agile environments and collaborate across global teams

Roles & Responsibilities

▪ Design and implement role-based access control (RBAC) strategies for SAP

environments

▪ Maintain and enhance user provisioning workflows, role catalogues, and access

governance controls

▪ Perform security testing, access audits, and remediation activities





▪ Review and apply SAP security patches and updates in a timely and controlled manner

▪ Collaborate with internal audit and compliance teams to ensure alignment with

regulatory requirements

▪ Provide technical guidance and resolution on SAP security issues and incidents

▪ Support access certification campaigns, SOD analysis, and quarterly audit reporting

▪ Maintain documentation for SAP security design, policies, and user support procedure

Job Description

Seeking an SAP Security & GRC Consultant with 4 - 6 years of experience in SAP Security, SAP GRC Access Control (ARA, ARM, EAM & BRM), SoD analysis, Role design, MSMP/BRF+ workflows and S/4HANA/Fiori security.

Candidate should be capable of independently handling implementation, support, audits and GRC compliance activities.

Key Responsibilities:

SAP Security

· Design and maintain SAP roles and authorizations across SAP systems.

· Create and manage Single, Composite and Derived Roles.

· Perform security reviews and access audits.

· Support SAP Fiori and S/4 HANA security concepts.

· Understanding of business processes such as Procure-to-Pay (P2P), Order-to-Cash (O2C) and Record-to-Report (R2R).

SAP GRC

· Configure and support SAP GRC Access Control modules:

o Access Risk Analysis (ARA)

o Access Request Management (ARM)

o Emergency Access Management (EAM)

o Business Role Management (BRM)

· Perform Segregation of Duties (SoD) analysis and risk remediation.

· Manage firefighter ID’s, mitigating controls and access reviews.

· Support GRC workflows (MSMP) and BRF+ configurations.

Participate in GRC implementation, upgrade and enhancement projects.

📌 SAP Security Consultant (India)
🏢 Insight Global
📍 India