Position: Senior Consultant - SAP Application Security & GRC

Locations: Hyderabad | Bengaluru | Chennai | Pune

Experience: 4 to 18 Years

Employment Type: Full time Contract

About the Role:

As a Senior Consultant, you will support client engagements focused on enterprise Cyber risk, specifically addressing Application Security concerns and navigating security transformation journeys across the SAP ecosystem. You will serve as a subject matter expert in SAP Application Security and GRC Access Control, collaborating with cross-functional technical teams and client stakeholders.

Key Responsibilities:

- - Serve as a Subject Matter Expert (SME) in multiple domains of SAP Application Security, authorizations, and GRC Access Control.
- - Lead and execute full lifecycle SAP S/4HANA or ECC security assessments, role design, implementation, and remediation exercises.
- - Identify, manage, and mitigate potential access risks and Segregation of Duties (SoD) conflicts across complex client landscapes.
- - Design, implement, and test SAP automated, manual, and application security controls.
- - Play a lead role on client workstreams, including engagement planning, delivery management, and quality assurance.
- - Drive continuous service improvement through regular technical reviews with internal and client leadership.
- - Contribute to practice-level initiatives, proposal development (RFP support),



and mentorship of junior consultants.

Mandatory Requirements:

- - 5 to 7 years of core, hands-on experience in SAP Security and SAP GRC 10.x / 12.x Access Control modules (ARA, ARM, EAM, BRM).
- - Proven track record executing full-cycle SAP S/4HANA and/or ECC security design, authorization architecture, and role maintenance via PFCG and SU24.
- - Deep technical and functional understanding of Segregation of Duties (SoD) frameworks, risk analysis, and compensating control design.
- - Practical experience troubleshooting authorization issues using standard diagnostic tools (SU53, ST01, STAUTHTRACE).
- - Strong project management, analytical, and structured client-facing communication skills.

Preferred Qualifications:

- - Hands-on security experience with SAP Fiori (business catalogs, target mapping, OData services, S_SERVICE, S_START).
- - Exposure to multi-module security designs such as SAP BI, BW, SRM, CRM, SCM, MDG, or HR (structural authorizations).
- - Familiarity with Internal Controls over Financial Reporting (ICFR), BPRC, or SOX ITGC audit procedures.
- - Awareness of SAP Cloud extensions, SAP BTP security concepts, or SAP Analytics Cloud (SAC).
- - Professional certifications: CISA, CISM, or CISSP.
- - Prior experience within Big 4 or top-tier management consulting environments.

📌 SAP Security Consultant (Telangana)
🏢 Ibu
📍 Telangana