SAP GRC Administrator Consultant

We are seeking an experienced SAP GRC Consultant to support and enhance security across the enterprise SAP landscape. This role requires a highly skilled professional who can collaborate with both business and IT stakeholders at all organizational levels to develop, implement, and maintain SAP security solutions. The successful candidate will provide support for both ongoing operations and strategic project initiatives while ensuring compliance, risk mitigation, and security best practices.

• Establish and maintain SAP security best practices across all SAP systems.
• Review enterprise architecture and implement security controls within the SAP environment.
• Design, create, and maintain SAP security architectures, standards, procedures, processes, and controls.
• Review SAP roles and security documentation and provide recommendations for security enhancements.
• Partner with IT Security, SOX, and Audit teams to strengthen controls surrounding user and system access.
• Ensure proper segregation of non-production and production environments.
• Identify security risks, determine root causes of violations, and implement mitigating controls and procedures.
• Build and maintain Segregation of Duties (SoD) rulesets and perform risk analysis at the user and role level.
• Drive continuous improvement initiatives to enhance SAP security effectiveness.
• Develop monitoring processes and security metrics to evaluate operational effectiveness.
• Create and maintain security documentation supporting the SAP environment.

• Support SAP service packs, upgrades, enhancements, and security implementations.
• Manage user access requests and provisioning activities.
• Perform SAP security testing and validation.
• Investigate and troubleshoot SAP security-related issues.
• Provide SAP security guidance and recommendations to business and technical teams.
• Design and configure transaction-level and authorization object security.
• Create and maintain parent and derived security roles.
• Configure user provisioning processes and workflow approvals.
• Support IT General Controls (ITGC), SAP user access reviews, and quarterly privileged access reviews.
• Manage SAP Firefighter access requests and approval reviews.
• Support software licensing compliance audits.
• Participate in and lead ad hoc information security initiatives as required by business or technical needs.

• Minimum of 3 years of experience in SAP Security or a related SAP technical role
  .
• Strong understanding of SAP roles and authorizations.
• SAP S/4
  
  HANA
• SAP HANA
• Experience developing security solutions for custom SAP transactions, tables, programs, and applications.
• Familiarity with Segregation of Duties (SoD) concepts and rulesets.
• Exposure to SAP security provisioning and Single Sign-On (SSO) solutions.
• Experience with issue resolution methodologies and root cause analysis.
• Strong troubleshooting, debugging, and analytical skills.
• Experience assessing SAP interfaces and third-party integrations.
• Ability to understand business processes and align security controls accordingly.

• Strong working knowledge of SAP tables, including:
• AGR*
• USR*
• USH*
• Hands-on SAP security experience with at least three of the following:
• SAP GRC
• SAP ECC
• SAP Fiori
• SAP CRM
• SAP BW
• SAP BI/BO
• SAP SEM
• SAP BCS
• SAP CUA
• SAP Business Objects (BOBJ)
• Experience implementing SAP reporting and analytics security, including SAP Business Objects and SAP Analytics Cloud.
• Experience designing, configuring, and implementing SAP GRC modules, including:
• Access Risk Analysis (ARA)
• Access Request Management (ARM)
• Emergency Access Management (EAM)
• Business Role Management (BRM)
• Experience configuring SAP GRC 10.x and 12.x rulesets and conducting SoD risk analysis.
• Proven experience establishing SAP security policies, standards, and procedures.
• Strong ability to resolve complex SAP security issues.
• Experience implementing security controls to support business risk mitigation strategies.