The SAP Cybersecurity and Onapsis Implementation Analyst will support the implementation, configuration, and operationalization of the Onapsis Platform across the SAP environment. This hands-on role will analyze cybersecurity findings, prioritize risk, coordinate remediation, validate closure, and work closely with the Onapsis team and internal SAP, infrastructure, and cybersecurity stakeholders.

Key Responsibilities

- Support Onapsis implementation, configuration, SAP system onboarding, testing, troubleshooting, and transition to operations.
- Coordinate implementation activities with the Onapsis team and SAP Basis, SAP Security, Database, Infrastructure, Development, Functional, SOC, and Vulnerability Management teams.
- Analyze Onapsis findings related to SAP vulnerabilities, missing patches, insecure configurations, authorizations, custom code, transports, operating systems, and databases.
- Validate and prioritize findings based on severity, exploitability, system criticality, business impact, and compensating controls.
- Translate findings into explicit remediation recommendations and track vulnerabilities through assignment, remediation, retesting, exception management, and closure.
- Coordinate remediation reviews, resolve blockers, and escalate overdue or high-risk findings.
- Support integration of relevant Onapsis alerts with SOC monitoring and incident-response processes.
- Develop dashboards and reports covering cybersecurity posture, critical findings, remediation progress, aging, exceptions, and risk trends.
- Maintain implementation documentation, operating procedures, remediation trackers, and knowledge-transfer materials.

Required Qualifications

- Bachelor's degree in Cybersecurity, Computer Science, Information Systems, or equivalent professional experience.




- Five or more years of experience in SAP security, SAP Basis, cybersecurity, vulnerability management, or application security.
- Hands-on experience implementing, configuring, administering, or operationalizing the Onapsis Platform.
- Experience analyzing Onapsis findings and coordinating remediation across SAP technical teams.
- Strong knowledge of SAP architecture, SAP Basis, SAP Security Notes, patching, system hardening, authentication, authorizations, interfaces, and SAP database and operating-system dependencies.
- Experience managing vulnerabilities from identification through remediation, validation, exception management, and closure.
- Ability to provide clear, actionable remediation guidance to technical teams.
- Strong analytical, documentation, communication, and stakeholder-management skills.
- Ability to work independently and coordinate activities across global teams.

Preferred Qualifications

- Experience with Onapsis vulnerability assessment, threat monitoring, custom code analysis, transport analysis, or compliance reporting.
- Experience integrating security alerts with SIEM, SOC, ServiceNow, or other vulnerability-management workflows.
- Experience with SAP S/4HANA, ECC, NetWeaver, HANA, BTP, or cloud-hosted SAP environments.
- Knowledge of NIST Cybersecurity Framework, NIST SP 800-53, ISO 27001, CIS Controls, or COBIT.
- Relevant SAP, Onapsis, CISSP, CISM, CRISC, GIAC, or cloud security certification is preferred.

Key Deliverables

- Onapsis implementation and SAP system-onboarding support.
- Validated and prioritized SAP cybersecurity findings.
- Vulnerability remediation tracker with owners and target dates.
- Retesting and closure evidence, including risk exceptions and escalation records.
- SAP cybersecurity dashboards, metrics, SOC procedures, operational runbooks, and knowledge-transfer documentation.

📌 Senior SAP Consultant (Bengaluru)
🏢 UST
📍 Bengaluru