Senior SAP Security & GRC Architect | Lead & Strategy

Position Summary

Experienced SAP Security & GRC professional with over 15+ years of expertise in SAP Security, Role Design, Governance Risk & Compliance (GRC), and enterprise access control. Proven track record in leading end-to-end SAP implementations, global security transformations, and S/4

HANA security design across complex landscapes.

• Lead design and implementation of SAP Security architecture across ECC, S/4
  
  HANA, BW/4
  
  HANA, Ariba, IBP, Success Factors, and BTP environments.
• Design and maintain enterprise role matrix aligned with business processes and regulatory requirements.
• Develop single, composite, and derived roles using PFCG and authorization concepts.
• Design authorization concept for S/4
  
  HANA systems including Fiori tile-based access.
• Prepare Fiori security design, catalog mapping, and role assignment strategy.
• Support S/4
  
  HANA implementation security strategy.

• Implement SAP GRC Access Control modules including ARA, ARM, BRM, EAM, and UAR.
• Design and configure SOD rule sets and risk mitigation controls.
• Build risk and control matrices aligned with SOX and internal audit requirements.
• Implement emergency access management (Firefighter IDs) and monitor logs.
• Implement IAG for Ariba, IBP, Success Factors, and BTP cloud applications.
• Implement SAP Identity Access Governance (IAG) services including Access Request, Access Analysis, Access Certification.
• Configure custom rule sets for cloud applications.
• Enable hybrid access governance between on-prem and cloud SAP systems.
• Support privileged access management.

• Risk Framework Development:
  Establish risk catalogs, assess risk likelihood and financial impact, and define risk mitigation strategies within the SAP platform.
• Control Design & Automation:
  Map business processes, design internal controls (SOX, Segregation of Duties), and configure Automated Continuous Control Monitoring (CCM).
• Testing & Remediation:
  Manage control self-assessments, evaluate control effectiveness, track testing evidence, and address identified deficiencies.
• Audit & Reporting:
  Generate compliance dashboards, maintain control documentation, and assist internal/external auditors with compliance reviews.
• Workflow Configuration:
  Set up roles, notifications, and approval workflows for surveys, testing, and issue resolution.

SAP Security (ECC, S/4

HANA, BW/4

HANA, Fiori, BTP, ARIBA, IBP), SAP GRC (AC, PC, RM), SAP IAG, Success Factors RBP, CUA, SOX Compliance, IT Audit, SOD Management.

• Excellent verbal and written communication skills.
• Skills:
  
  S/4 HANA, GRC, SAP Security.