Required Skills & ExperienceRequired Experience▪ 5+ years of experience in SAP Security or related Information Security roles▪ Proven experience in user access administration, role design, segregation of dutiesanalysis, and audit support▪ Hands-on experience with SAP ECC and/or S/4HANA security modelsEssential skills▪ Robust expertise in SAP user and role administration, profile generator (PFCG), andauthorization concepts▪ Knowledge of GRC Access Control modules including Access Risk Analysis (ARA),Emergency Access Management (EAM), and Access Request Management (ARM)▪ Experience with audit and compliance frameworks such as SOX, GDPR, and PCI-DSS▪ Familiarity with SAP Security Patch Management, Security Notes, and vulnerabilityassessments▪ Ability to conduct security testing, troubleshoot authorization issues, and developmitigation strategies▪ Exposure to SAP Fiori security and authorization concepts▪ Understanding of SAP HANA database privileges and native security objects▪ Familiarity with cloud-based SAP systems, including SAP BTP▪ Experience with SIEM tools, log monitoring, or integration with enterprise securityplatforms▪ Ability to work in Agile environments and collaborate across global teamsRoles & Responsibilities▪ Design and implement role-based access control (RBAC) strategies for SAPenvironments▪ Maintain and enhance user provisioning workflows, role catalogues, and accessgovernance controls▪ Perform security testing, access audits,



and remediation activities▪ Review and apply SAP security patches and updates in a timely and controlled manner▪ Collaborate with internal audit and compliance teams to ensure alignment withregulatory requirements▪ Provide technical guidance and resolution on SAP security issues and incidents▪ Support access certification campaigns, SOD analysis, and quarterly audit reporting▪ Maintain documentation for SAP security design, policies, and user support procedureJob DescriptionSeeking an SAP Security & GRC Consultant with 4 - 6 years of experience in SAP Security, SAP GRC Access Control (ARA, ARM, EAM & BRM), SoD analysis, Role design, MSMP/BRF+ workflows and S/4HANA/Fiori security.Candidate should be capable of independently handling implementation, support, audits and GRC compliance activities.Key Responsibilities:SAP Security· Design and maintain SAP roles and authorizations across SAP systems.· Create and manage Single, Composite and Derived Roles.· Perform security reviews and access audits.· Support SAP Fiori and S/4 HANA security concepts.· Understanding of business processes such as Procure-to-Pay (P2P), Order-to-Cash (O2C) and Record-to-Report (R2R).SAP GRC· Configure and support SAP GRC Access Control modules:o Access Risk Analysis (ARA)o Access Request Management (ARM)o Emergency Access Management (EAM)o Business Role Management (BRM)· Perform Segregation of Duties (SoD) analysis and risk remediation.· Manage firefighter ID’s, mitigating controls and access reviews.· Support GRC workflows (MSMP) and BRF+ configurations.Participate in GRC implementation, upgrade and enhancement projects.

📌 Sap Security Consultant (Maharashtra)
🏢 Insight Global
📍 Maharashtra