Purpose of the Job

The SAP Security Consultant is responsible for designing and maintaining role-based access controls (RBAC), ensuring compliance with security policies and audit requirements.

The overall purpose of this role is to:

• Define and implement SAP security roles and authorizations.
• Ensure compliance with SOX, GDPR, and ITGC controls.
• Mitigate security risks and vulnerabilities.
• Ensure compliance with segregation of duties (SOD)
• Implement security controls for SAP systems
• Support audits and compliance requirements
• Mitigate security risks

Job Description

Operation:

• Design and maintain SAP security roles (Single, Composite, Derived).
• Implement SOD (Segregation of Duties) controls
• Manage user access (SU01, PFCG) and SOD (Segregation of Duties) conflicts.
• Conduct security audits and risk assessments.
• Support SAP Fiori, HANA, and S/4HANA security.
• Configure authorization objects and field-level security
• Set up firefighter IDs and emergency access
• Perform user access reviews and role remediation
• Implement GRC Access Control solutions
• Troubleshoot authorization issues
• Maintain security documentation

Customer:

• Work with business to define access requirements.
• Train users on security policies.

People:

• Mentor junior security analysts.

Cross-functional Collaboration:

• Work with Basis and Audit teams for compliance.

Job Requirements - Experience and Education

• Bachelor's degree in IT, Computer Science, or related field
• 8+ years of SAP Security experience
• Strong knowledge of GRC Access Control
• Experience with S/4HANA security preferred
• SAP Security certification is a plus

Leadership Behaviors

Skills