Sap Security

Location: Vasanthanagar

We are seeking an experienced  SAP Security & Access Governance Consultant  to join our Global IT team. In this role, you will be responsible for SAP user administration, role design, access governance, and security compliance across the SAP landscape. As a subject matter expert in SAP Security, you will ensure access management processes adhere to governance and compliance requirements while supporting business operations through secure and efficient role provisioning.
While Putzmeister currently does not utilize the SAP GRC toolset, the successful candidate must possess a strong functional understanding of Governance, Risk, and Compliance (GRC) principles, including Segregation of Duties (SoD), critical access management, and authorization risk mitigation, and be able to embed these controls into SAP security processes and role designs.
Number of Positions:  1 (One)

Key Responsibilities
Design, create, maintain, and optimize SAP roles using  PFCG  in alignment with business requirements and security standards.
Perform SAP user administration activities including user creation, modification, deactivation, lock/unlock, and access maintenance using  SU01 .
Develop and maintain single, composite, and derived roles while ensuring compliance with SAP authorization best practices.
Review role designs and access requests to identify potential  Segregation of Duties (SoD)  conflicts and access risks.
Apply governance and compliance controls during role creation and user provisioning processes without reliance on SAP GRC tools.
Analyze critical SAP transaction codes and authorization objects to ensure appropriate access controls are implemented.
Support periodic access reviews, user recertification exercises, and audit activities.
Manage user provisioning and deprovisioning activities throughout the user lifecycle.
Collaborate with business stakeholders to define role concepts and access models that balance operational efficiency with security requirements.
Support  Single Sign-On (SSO) , authentication, and Identity & Access Management (IAM) related initiatives.
Troubleshoot authorization-related issues and provide timely resolution for business-critical incidents.
Develop and maintain security documentation, role design standards, access governance procedures, and operational guidelines.

Requirements
Bachelor’s degree in Computer Science, Information Technology, Information Systems, or a related field.
8+ years of experience in SAP Security, User Administration, and Role Management.
Strong hands-on experience with SAP authorization concepts, profiles, roles, and authorization objects.
Proven experience working with SAP PFCG for role design, role maintenance, and role provisioning.
Strong experience with SAP user administration (SU01) and related security transactions.
Good functional understanding of Governance, Risk & Compliance (GRC) concepts, including:
Segregation of Duties (SoD)
Critical Access Management
Access Governance
Security Compliance Controls
Ability to identify and mitigate access risks during role design and user provisioning activities.
Knowledge of critical SAP transaction codes and associated authorization risks.
Experience designing and supporting single, composite, and derived roles in SAP ECC and/or SAP S/4

HANA environments.
Understanding of Identity & Access Management (IAM) concepts, user lifecycle management, and access provisioning processes.
Experience supporting Single Sign-On (SSO) and authentication mechanisms.
Experience supporting internal and external audits and responding to compliance-related requirements.
Strong analytical and troubleshooting skills with the ability to resolve complex authorization issues.
Excellent communication and stakeholder management skills with the ability to collaborate effectively with business and IT teams.
Ability to work independently while supporting global teams across multiple time zones.
Willingness to provide support during planned system changes, audits, and critical business requirements when necessary.