Role & responsibilities

Manage role and authorization changes across the landscape (S4 HANA, ECC, Fiori, BTP) with support from external vendor and group authorization team, if required:

- Role Design and Testing based on SAP Role Based Access Control strategy (RBAC)
- Segregation of Duty (SoD) validation and management,
- Local transaction review and management
- SAP application server and database security management.
- Acts as the highest expertise at Zone level (Level 3) to provide solution and recommendation on complex authorization issues, architectural changes and security incidents across S/4HANA, ECC, Fiori and related SAP technologies.
- Act as the escalation point for Run/ AMS team and provide the expertise to troubleshoot complex authorization issues, architectural changes, or security breaches, performing deep-dive traces (ST01/STAUTHTRACE) and log analysis.
- Collaborate with group team (Level 4”) on cross-Zone incidents and leverage any lesson learnt from other Zone
- Act as the primary functional bridge between the SAP Security domain and the Zone MyAR team to ensure seamless end-to-end provisioning and identity lifecycle management during project/ demand delivery.
- Align and drive security roadmap for the migration from legacy ECC (Task-based) to S/4HANA (Business Process/App-based) authorizations, specifically managing the complexity of Fiori catalogs, groups, and OData services with group team (“Level 4”).
- Collaborate with Cybersecurity, Basis and Development team to review custom ABAP code, ensuring that AUTHORITY-CHECK objects are correctly implemented, and that custom transactions do not bypass standard security and Cybersecurity policies.
- Ensure existing good practices and technical knowledge are retained through knowledge transfer,



deliverables and good documentation
- Act as Demand Manager and ensure demand delivery follow the appropriate NEO Change Approval Board process and was delivered in-time and on-budget.
- Support GRC manager with Service Request and Demand documentation during annual IT Audit exercise
- Coordinate the different actors involved in the project, from IT to Business/ ICM/ Key Users (Group, Zone, Countries).
- Create a positive value-added relationship with all stakeholders (Group, Zone, Countries, Business, IT).

Preferred candidate profile

- Bachelor’s or Master’s degree in computer science, Information Systems, or related field.
- Strong SAP security expertise with minimum of 5 years of combined experience in SAP GRC, SAP Authorization and Project Management.
- At least 3 years’ experience on SAP GRC Access Control
- Extensive experience in the design and development of SAP authorization strategy and solutions
- Experience in end-to-end SAP GRC & Authorization, ability to conduct workshops, manage and plan for UAT, Regression Testing, Cutover and Hyper care activities.
- Knowledge of SAP Basis is a plus
- Experience on Data privacy and encryption is a plus
- Knowledge of IT Service Management is a plus

Professional Competencies

- Ability to manage multiple priorities, projects
- Ability to work effectively with people in different

zones/cultures
- Excellent problem-solving capabilities with robust

communication skills and teamwork
- Self-motivation, ownership and able to lead a team
- Proactive, problem solver and influencing skills
- Ability to listen/decode business needs
- Ability to handle multiple tasks independently
- Ability to work within stringent deadlines
- Fluency in English
- Preferably worked in a multi-national company

Experience in S4 HANA is a plus

📌 LOreal is Hiring For SAP GRC Authorization Lead (Hyderabad)
🏢 Loreal India
📍 Hyderabad