SAP GRC Cyber Consultant
Confirmed on the employer's own hiring board on Nov 2, 2026. First seen by Alion on Oct 27, 2026.
SAP GRC Cyber Consultant
Experience: 4+ Years (5-7 Years of SAP Security/GRC Experience Preferred as per Detailed Requirements)
Location: Bengaluru / Hyderabad / Chennai / Pune
Work Mode: Hybrid - 2 Days Work from Office per Week
Employment Type: Contract
Contract Duration: 6 Months
BGV Requirement: Mandatory
Number of Openings: 20
Job Overview
We are looking for experienced SAP GRC Cyber Consultants with strong hands-on expertise in SAP Application Security, SAP GRC Access Control, SAP S/4HANA Security, and enterprise security controls.
The consultant will support clients in addressing SAP application security concerns, evaluating security risks, implementing access controls, and strengthening governance, risk, and compliance practices across SAP environments.
The ideal candidate should have experience in SAP Security assessments, role design, Segregation of Duties (SoD), SAP GRC implementations, and working with business and technical stakeholders.
Key Responsibilities
Serve as a subject matter expert in SAP Application Security and SAP GRC Access Control.
Support clients in identifying, evaluating, and addressing SAP application security risks.
Perform security assessments, design, and implementations across SAP S/4HANA and ECC environments.
Design, implement, and test SAP security roles and authorization controls.
Provide recommendations on SAP security role design and implementation based on established practices.
Analyze Segregation of Duties (SoD) conflicts and support the implementation of appropriate controls.
Design, implement, and test automated, manual, security, and SoD controls.
Support SAP GRC Access Control configuration and related security activities.
Identify potential risks during client engagements and communicate concerns proactively.
Collaborate with client stakeholders and internal teams to assess service delivery and identify improvements.
Participate in project planning, management, quality assurance, and delivery activities.
Take ownership of assigned project workstreams and contribute to successful project outcomes.
Support proposal development and client discussions where required.
Contribute to team development, knowledge sharing, and training activities.
Work collaboratively with functional, technical, security, and business teams to maintain strong security and compliance standards.
Work Arrangement
Locations: Bengaluru, Hyderabad, Chennai, or Pune
Work Mode: Hybrid
Office Attendance: 2 Days per Week
Contract Duration: 6 Months
Background Verification: Mandatory
Shift Timing: Not specified
Requirements
Required Skills & Experience
Minimum 4+ years of relevant experience as per the requirement, with 5-7 years of SAP Security and SAP GRC experience specified in the detailed JD.
Strong hands-on experience with SAP Security and SAP GRC Access Control 10.x/12.x.
Experience working with SAP S/4HANA and SAP ECC security environments.
Hands-on experience in full-cycle SAP S/4HANA or ECC Security assessments, design, and implementations.
Strong understanding of SAP security role design, authorizations, and access controls.
Experience implementing SAP Security and Governance, Risk, and Compliance frameworks.
Strong understanding of Segregation of Duties (SoD) principles and frameworks.
Ability to design, implement, and test SAP automated, manual, security, and SoD controls.
Knowledge of enterprise application security practices and SAP security risk management.
Excellent written and verbal communication skills.
Strong project management, organizational, and problem-solving skills.
Ability to collaborate with stakeholders and contribute to project delivery and quality management.
Good-to-Have Skills
SAP Fiori Security experience.
Security experience across SAP BI, SRM, CRM, SCM, MDG, and HR modules.
Experience working with Big 4 consulting organizations.
Experience in client-facing consulting and project leadership activities.
Exposure to SAP security advisory, risk assessments, and compliance improvement initiatives.
Preferred Certifications
CISSP - Certified Information Systems Security Professional
CISM - Certified Information Security Manager
CISA - Certified Information Systems Auditor
These certifications are preferred and not mandatory.
Additional Requirements
Willingness to work in a hybrid arrangement with 2 days per week in the office.
Strong communication and stakeholder management capabilities.
Ability to work independently and collaboratively across teams.
Experience supporting SAP Security and GRC requirements in enterprise environments.