Job Description

SAP GRC Senior Consultant

We are looking for an experienced SAP GRC Senior Consultant to support SAP Security and Governance, Risk & Compliance operations across SAP landscapes. The consultant will be responsible for SAP

The role requires strong hands-on experience in SAP GRC Access Control, SAP Security, authorization concepts, and experience working in an AMS/support workplace, including planned upgrades, patches, testing, and post-upgrade stabilization.

GRC support, incident/problem management, access provisioning, role design, risk analysis, compliance activities, upgrades, enhancements, and integration with SAP S/4HANA and other enterprise applications.

Key Responsibilities

1. SAP GRC Support & AMS

Provide L2/L3 support for SAP GRC and SAP Security-related incidents and service requests.

Analyze and resolve issues related to:

User access

Role assignments

Access requests

Approval workflows

Risk analysis

Segregation of Duties (SoD)

Emergency access

Business role management

Perform root-cause analysis for recurring incidents and implement permanent corrective actions.

Manage incidents, service requests, problems, and changes in accordance with SLA requirements.

Participate in production support and provide timely resolution for critical security issues.

Coordinate with functional, technical, infrastructure, and business teams for issue resolution.

Maintain support documentation, knowledge articles, troubleshooting guides, and runbooks.

2. SAP GRC Access Control

Hands-on experience with the following SAP GRC Access Control components:

Access Risk Analysis (ARA)

Access Request Management (ARM)

Business Role Management (BRM)

Emergency Access Management (EAM / Firefighter)

User Access Review (UAR)

SoD and critical access analysis

Mitigation controls

Risk and rule-set configuration

Workflow configuration

MSMP workflow configuration

BRF+ rules and workflow-related configuration

Connector configuration and synchronization

Repository and authorization synchronization

Background jobs and monitoring

3. SAP Security & Authorization

Strong understanding of SAP authorization concepts and security architecture.





Design and maintain SAP roles based on business and technical requirements.

Analyze authorization errors using SU53, STAUTHTRACE, ST01 and related tools.

Create and modify single, composite, derived, and business roles.

Perform role redesign and authorization remediation based on SoD findings.

Support user provisioning, role assignment, user lock/unlock, and access reviews.

Analyze critical transactions, authorization objects, and sensitive access.

Support SAP S/4HANA authorization concepts and Fiori business roles/catalogs where applicable.

Work with SAP Basis and application teams for security-related technical issues.

4. SAP GRC Upgrade & Enhancement Activities

Participate in SAP GRC version upgrades, support pack upgrades, enhancement pack activities, and security patching.

Analyze upgrade impact on:

GRC configuration

Connectors

Workflows

BRF+ rules

Risk rulesets

Firefighter configuration

User provisioning

Integration interfaces

Perform pre-upgrade assessment and identify configuration/customization impacts.

Support upgrade planning, technical preparation, testing, and deployment.

Prepare and execute upgrade test scenarios.

Perform regression testing for GRC workflows, risk analysis, access requests, and firefighter processes.

Validate interfaces and connectors after upgrade.

Troubleshoot post-upgrade issues and coordinate with SAP/Basis teams for resolution.

Support cutover, go-live, and post-go-live hypercare.

Document upgrade changes and lessons learned.

5. SAP S/4HANA & Fiori Security

Support SAP GRC integration with SAP S/4HANA landscapes.

Understand S/4HANA authorization concepts and Fiori security.

Support:

Fiori catalogs

Spaces and pages

Business roles

PFCG roles

OData services

ICF services

Authorization objects

Troubleshoot authorization issues impacting Fiori applications.





Support GRC risk analysis for S/4HANA roles and business processes.

6. Access Risk & SoD Management

Configure and maintain SoD rules and critical access rules.

Perform risk analysis for users, roles, and business processes.

Analyze and remediate SoD conflicts.

Maintain mitigation controls and mitigating assignments.

Support periodic user and role access reviews.

Prepare compliance reports for internal and external audits.

Work with business process owners to validate risks and controls.

Support audit remediation and evidence collection.

7. Emergency Access Management

Configure and maintain Firefighter IDs and controllers.

Support Firefighter access requests and approvals.

Monitor Firefighter logs and investigate unusual activities.

Perform periodic review of Firefighter usage.

Resolve issues related to Firefighter log synchronization and reporting.

Support audit requirements related to privileged/emergency access.

8. Integration & Technical Activities

Support GRC integration with SAP systems using GRC connectors.

Configure and troubleshoot RFC connections and connector synchronization.

Support integration with:

SAP ECC

SAP S/4HANA

SAP BW/BW4HANA where applicable

SAP Fiori

SAP SuccessFactors or other SAP cloud applications where applicable

Monitor synchronization jobs and troubleshoot failed repository/user/role syncs.

Coordinate with Basis and integration teams for connectivity and authorization issues.

9. Testing & Change Management

Prepare functional and technical test cases for GRC changes and upgrades.

Execute SIT, UAT, regression, and post-production validation.

Support transport management and release activities.

Prepare change requests and technical implementation documentation.

Participate in CAB/change approval processes.

Maintain test evidence and deployment documentation.

10. Documentation & Governance

Maintain and update:

SAP GRC configuration documents

Security design documents

Role design documents

SoD ruleset documentation

Workflow documentation

Access request procedures

Firefighter procedures

Support runbooks

Upgrade/cutover plans

Test scripts

Knowledge base articles

Audit/compliance evidence

📌 SAP Technical consultant,Sr (India)
🏢 Stefanini Group
📍 India