SAP GRC Senior Consultant

SAP GRC Senior Consultant

We are looking for an experienced SAP GRC Senior Consultant to support SAP Security and Governance, Risk & Compliance operations across SAP landscapes. The consultant will be responsible for SAP

The role requires strong hands-on experience in SAP GRC Access Control, SAP Security, authorization concepts, and experience working in an AMS/support environment, including planned upgrades, patches, testing, and post-upgrade stabilization.

GRC support, incident/problem management, access provisioning, role design, risk analysis, compliance activities, upgrades, enhancements, and integration with SAP S/4HANA and other enterprise applications.

Job Requirements

Details:

Key Responsibilities

• 1. SAP GRC Support & AMS

• Provide L2/L3 support for SAP GRC and SAP Security-related incidents and service requests.

Analyze and resolve issues related to:

• User access

• Role assignments

• Access requests

• Approval workflows

• Risk analysis

• Segregation of Duties (SoD)

• Emergency access

• Business role management

• Perform root-cause analysis for recurring incidents and implement permanent corrective actions.

• Manage incidents, service requests, problems, and changes in accordance with SLA requirements.

• Participate in production support and provide timely resolution for critical security issues.

• Coordinate with functional, technical, infrastructure, and business teams for issue resolution.

• Maintain support documentation, knowledge articles, troubleshooting guides, and runbooks.

• 2. SAP GRC Access Control

Hands-on experience with the following SAP GRC Access Control components:

• Access Risk Analysis (ARA)

• Access Request Management (ARM)

• Business Role Management (BRM)

• Emergency Access Management (EAM / Firefighter)

• User Access Review (UAR)

• SoD and critical access analysis

• Mitigation controls

• Risk and rule-set configuration

• Workflow configuration

• MSMP workflow configuration

• BRF+ rules and workflow-related configuration

• Connector configuration and synchronization

• Repository and authorization synchronization

• Background jobs and monitoring

• 3. SAP Security & Authorization

• Strong understanding of SAP authorization concepts and security architecture.

• Design and maintain SAP roles based on business and technical requirements.

• Analyze authorization errors using SU53, STAUTHTRACE, ST01 and related tools.

• Create and modify single, composite, derived, and business roles.

• Perform role redesign and authorization remediation based on SoD findings.

• Support user provisioning, role assignment, user lock/unlock, and access reviews.

• Analyze critical transactions, authorization objects, and sensitive access.

• Support SAP S/4HANA authorization concepts and Fiori business roles/catalogs where applicable.

• Work with SAP Basis and application teams for security-related technical issues.

• 4. SAP GRC Upgrade & Enhancement Activities

• Participate in SAP GRC version upgrades, support pack upgrades, enhancement pack activities, and security patching.

Analyze upgrade impact on:

• GRC configuration

• Connectors

• Workflows

• BRF+ rules

• Risk rulesets

• Firefighter configuration

• User provisioning

• Integration interfaces

• Perform pre-upgrade assessment and identify configuration/customization impacts.

• Support upgrade planning, technical preparation, testing, and deployment.

• Prepare and execute upgrade test scenarios.

• Perform regression testing for GRC workflows, risk analysis, access requests, and firefighter processes.

• Validate interfaces and connectors after upgrade.

• Troubleshoot post-upgrade issues and coordinate with SAP/Basis teams for resolution.

• Support cutover, go-live, and post-go-live hypercare.

• Document upgrade changes and lessons learned.

• 5. SAP S/4HANA & Fiori Security

• Support SAP GRC integration with SAP S/4HANA landscapes.

• Understand S/4HANA authorization concepts and Fiori security.

Support:

• Fiori catalogs

• Spaces and pages

• Business roles

• PFCG roles

• OData services

• ICF services

• Authorization objects

• Troubleshoot authorization issues impacting Fiori applications.

• Support GRC risk analysis for S/4HANA roles and business processes.

• 6. Access Risk & SoD Management

• Configure and maintain SoD rules and critical access rules.

• Perform risk analysis for users, roles, and business processes.

• Analyze and remediate SoD conflicts.

• Maintain mitigation controls and mitigating assignments.

• Support periodic user and role access reviews.

• Prepare compliance reports for internal and external audits.

• Work with business process owners to validate risks and controls.

• Support audit remediation and evidence collection.

• 7. Emergency Access Management

• Configure and maintain Firefighter IDs and controllers.

• Support Firefighter access requests and approvals.

• Monitor Firefighter logs and investigate unusual activities.

• Perform periodic review of Firefighter usage.

• Resolve issues related to Firefighter log synchronization and reporting.

• Support audit requirements related to privileged/emergency access.

• 8. Integration & Technical Activities

• Support GRC integration with SAP systems using GRC connectors.

• Configure and troubleshoot RFC connections and connector synchronization.

Support integration with:

• SAP ECC

• SAP S/4HANA

• SAP BW/BW4HANA where applicable

• SAP Fiori

• SAP SuccessFactors or other SAP cloud applications where applicable

• Monitor synchronization jobs and troubleshoot failed repository/user/role syncs.

• Coordinate with Basis and integration teams for connectivity and authorization issues.

• 9. Testing & Change Management

• Prepare functional and technical test cases for GRC changes and upgrades.

• Execute SIT, UAT, regression, and post-production validation.

• Support transport management and release activities.

• Prepare change requests and technical implementation documentation.

• Participate in CAB/change approval processes.

• Maintain test evidence and deployment documentation.

• 10. Documentation & Governance

Maintain and update:

• SAP GRC configuration documents

• Security design documents

• Role design documents

• SoD ruleset documentation

• Workflow documentation

• Access request procedures

• Firefighter procedures

• Support runbooks

• Upgrade/cutover plans

• Test scripts

• Knowledge base articles

• Audit/compliance evidence

Pay Range:

• Based on Experience