SAP GRC COnsultant
Company not disclosed
Job Description
SAP GRC Consultant – 5+ Years ExperienceRole Overview We are looking for an experienced SAP GRC Consultant with 5+ years of hands-on experience in SAP GRC Access Control and SAP Security. The consultant will be responsible for implementing, configuring, and supporting SAP GRC solutions across SAP ECC and S/4HANA environments, with a strong focus on access governance, Segregation of Duties (SoD), compliance, and authorization management.Key Responsibilities - Configure, implement, and support SAP GRC Access Control solutions across SAP ECC and S/4HANA landscapes. - Work extensively on GRC ARA, ARM, EAM/Firefighter, and BRM modules. - Perform Segregation of Duties (SoD) analysis, risk identification, remediation, and mitigation. - Design and maintain SAP security roles, business roles, composite roles, derived roles, and authorization concepts. - Configure and maintain GRC workflows, MSMP, BRF+, connectors, connector groups, and synchronization jobs. - Manage user access requests, approvals, provisioning, role assignments, and de-provisioning. - Configure and administer Firefighter IDs, owners, controllers, and log review processes. - Develop and maintain GRC rulesets, functions, risks, actions, permissions, and mitigation controls. - Perform role redesign, authorization cleanup, access reviews, and periodic user access certification. - Troubleshoot GRC integration and authorization issues and coordinate with SAP Basis, Security, and functional teams. - Support SAP S/4HANA and Fiori security and authorization requirements. - Participate in GRC implementation, rollout, upgrade, migration, enhancement, and production support projects. - Work with business process owners and compliance teams to understand access requirements and control risks. - Support SOX, ITGC, internal/external audit, and compliance activities and provide audit evidence. - Prepare functional specifications, configuration documents, test scripts, training materials, and operational documentation. - Conduct SIT/UAT testing, support defect resolution, and coordinate with technical teams. - Provide production support and resolve SAP GRC/Security incidents within agreed SLAs. - Analyze existing security and GRC processes and recommend improvements to access governance and controls. Required Technical Skills - 5+ years of experience in SAP GRC and/or SAP Security, with strong hands-on experience in SAP GRC Access Control. - Strong hands-on experience in: - SAP GRC ARA – Access Risk Analysis - SAP GRC ARM – Access Request Management - SAP GRC EAM – Emergency Access Management - SAP GRC BRM – Business Role Management - Strong knowledge of SAP Security and Authorization concepts. - Hands-on experience with PFCG, SU01, SU24, SU53, SU56, ST01/STAUTHTRACE. - Experience with SAP GRC configuration through SPRO. - Strong understanding of SoD rulesets, risks, functions, actions, permissions, remediation, and mitigation controls. - Experience configuring and maintaining GRC connectors and backend system integration. - Experience with user and role synchronization, repository synchronization, and authorization synchronization. - Strong understanding of MSMP workflow configuration and BRF+ rules. - Experience with Firefighter/EAM configuration and log monitoring. - Good understanding of SAP ECC and S/4HANA security. - Experience with SAP Fiori security and authorization concepts. - Experience supporting SAP GRC implementations, upgrades, enhancements, and production environments. - Understanding of SAP security audit, access certification, and compliance requirements.
Similar jobs
- SAP GRC Consultant
Singapore, Singapore