SAP Security / GRC Consultant (8+ Years) Role snapshot

Field

Detail

Job title

Senior SAP Security / GRC Consultant

Experience

8+ years in SAP Security, including 4+ years in SAP GRC Access Control

Location

Hyderabad, India (delivery center). hybrid / remote considered

Employment type

Full-time

Travel

UK/EU as projects require

Reports to

SAP Practice Lead, Quadric IT

About Quadric IT

Quadric IT LLC is an SAP and ERP consulting firm headquartered in Lutz, Florida, with a delivery center in Hyderabad, India and a growing UK/EU presence. We help manufacturers, life-sciences and industrial clients implement, upgrade and run SAP S/4HANA and related platforms. Our teams combine deep functional expertise with hands-on delivery across logistics, finance, data and security.

Role summary

We are hiring a Senior SAP Security / GRC Consultant to design, build and run secure, audit-ready role and access frameworks for our clients. You will own SAP Security and GRC Access Control workstreams on S/4HANA implementations, ECC-to-S/4HANA conversions and managed-support engagements. You will work directly with client IT, internal audit and business owners, and mentor junior consultants in our Hyderabad delivery center.

Key responsibilities

SAP Security

- Design and build role concepts (single, composite, derived and business roles) for S/4HANA, ECC, BW/4HANA and Fiori using PFCG.
- Configure Fiori security: catalogs, business groups, spaces and pages, OData service authorizations and launchpad content.
- Manage user administration, CUA, password policies and SU24 authorization defaults.
- Secure S/4HANA and HANA databases: HANA roles, privileges and analytic authorizations.
- Troubleshoot access issues using SU53, ST01/STAUTHTRACE and SUIM; resolve tickets within SLA.
- Lead security workstreams in ECC-to-S/4HANA conversions, including role remediation and SU25 upgrades.





SAP GRC Access Control

- Implement and support GRC Access Control 12.0 modules: ARA, ARM, BRM and EAM (Firefighter).
- Build and maintain SoD rulesets, mitigating controls and risk analysis for business processes.
- Configure MSMP workflows and BRF+ rules for access request approvals.
- Run periodic User Access Reviews (UAR) and SoD reviews; produce audit-ready evidence.
- Integrate GRC with connected systems, IdM and cloud identity (SAP Cloud Identity Services / IAG) where in scope.

Audit, compliance and delivery

- Support SOX, GxP, ITGC and internal / external audits with clear controls documentation.
- Prepare design documents, test scripts and cutover plans; lead unit, integration and UAT testing for roles.
- Advise clients on security best practice, least privilege and license optimization.
- Mentor junior consultants and contribute to Quadric IT accelerators, templates and presales estimates.

Required skills and experience
- 8+ years of hands-on SAP Security experience, with at least 4 years in SAP GRC Access Control (10.x / 12.0).
- 2+ full-lifecycle SAP S/4HANA implementations or conversions in a security lead or senior role.
- Strong command of PFCG, SU24, SU25, SUIM, SU53, ST01/STAUTHTRACE, CUA and user administration.
- Proven Fiori security design: catalogs, groups, spaces/pages and OData services.
- Hands-on GRC configuration: ARA, ARM, BRM, EAM, MSMP workflows, BRF+ and SoD rulesets.
- SAP HANA database security and BW/4HANA analysis authorizations.




- Working knowledge of SOX, ITGC and audit processes; ability to produce audit evidence.
- Bachelor's degree in Computer Science, IT, Engineering or a related field.
- Clear written and spoken English; comfortable presenting to client stakeholders.

Preferred qualifications
- SAP Certified Technology Consultant SAP S/4HANA System Security, or SAP GRC Access Control certification.
- Experience with SAP Cloud Identity Access Governance (IAG), Identity Authentication / Provisioning (IAS / IPS) and BTP security.
- Exposure to SAP Process Control, Risk Management or SAP Enterprise Threat Detection.
- Security experience for SuccessFactors, Ariba or other SAP cloud solutions.
- Experience in regulated industries (life sciences / GxP, medical devices, manufacturing).
- Familiarity with third-party tools such as SailPoint, Saviynt, Pathlock or Onapsis.
- Prior consulting or onshore offshore delivery experience across US and UK/EU clients.

Soft skills
- Client-facing confidence: explains risk and controls in business language.
- Ownership mindset: drives issues to closure across time zones.
- Structured documentation and attention to detail.
- Collaborative mentor for junior team members.

What we offer
- Work on S/4HANA transformation programs for US, UK and EU clients.
- Competitive compensation and performance-linked incentives.
- Paid SAP certification and continuous learning support.
- Flexible hybrid / remote working.
- A founder-led firm where senior consultants shape practice growth and offerings.

How to apply Send your resume and a short note on your most relevant S/4HANA security or GRC project to [email protected], with the subject line "SAP Security / GRC 8+ Years".

Quadric IT is an equal chance employer and welcomes applicants from all backgrounds.

📌 SAP Security / GRC Consultant (Hyderabad)
🏢 Quadric IT
📍 Hyderabad