Sr. SAP GRC Security Consultant

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Sr. SAP GRC Security Consultant based in India.

This is a senior security and governance role focused on protecting access across complex SAP environments.

You will design and manage security controls spanning SAP S/4HANA, Fiori, and SAP BTP cloud applications.

The role combines hands-on technical expertise with strong knowledge of business processes and compliance requirements.

You will play a key role in managing segregation of duties, access risks, certifications, and audit readiness across hybrid landscapes.

Close collaboration with business owners, SAP teams, IAM, Basis, and functional stakeholders will be essential.

The position offers the opportunity to influence enterprise security standards while supporting secure digital transformation.

The role is remote within India and operates primarily on a US shift schedule.

Accountabilities

• Design, configure, and maintain user roles, authorizations, profiles, and access controls across SAP S/4HANA and Fiori environments.
• Configure and administer SAP BTP Identity Access Governance (IAG), supporting access risk analysis, segregation of duties (SoD), and automated access certifications.
• Manage role-based and data-level security controls across SAP Analytics Cloud (SAC) and SAP Datasphere.
• Partner with business process owners to translate functional requirements into effective role, authorization, and access-control designs.
• Design, maintain, and monitor SoD rulesets, conduct risk analysis, and coordinate remediation across cloud and on-premise SAP environments.
• Conduct periodic user access reviews, audit-trail analysis, compliance checks, and control assessments aligned with SOX, GDPR, and internal audit requirements.
• Prepare audit evidence, security documentation, control reports, and supporting materials for internal and external audits.
• Collaborate with Basis, functional, IAM, and other technical teams to ensure secure and compliant end-to-end access management.
• Independently manage complex access-control issues, assess security risks, and communicate recommendations clearly to business and IT stakeholders.
• Contribute to continuous improvements in SAP security governance, access processes, controls, and audit readiness.

Requirements

• 7-10 years of hands-on experience in SAP Security and GRC across SAP S/4HANA and cloud environments.
• Strong experience with SAP GRC Access Control, including Access Risk Analysis (ARA), Emergency Access Management (EAM), Access Request Management (ARM), and Business Role Management (BRM).
• Strong hands-on expertise with SAP BTP Identity Access Governance (IAG), SAP Analytics Cloud (SAC), and SAP Datasphere security and auditing.
• Solid understanding of SAP S/4HANA and Fiori security, including role design, authorization concepts, and access provisioning.
• Strong understanding of SAP business processes and the ability to translate business requirements into appropriate security and control designs.
• Proven experience managing SoD rulesets, access-risk analysis, remediation, and governance processes across hybrid SAP landscapes.
• Experience supporting SOX, GDPR, or equivalent compliance and audit programs, including access reviews, control testing, and evidence preparation.
• Ability to independently troubleshoot and manage complex security landscapes while communicating technical risks effectively to senior business and IT stakeholders.
• Experience with SAP HANA database security, including user management, privileges, and audit-log configuration, is a plus.
• Familiarity with SAP Cloud Identity Services, IAS/IPS, SSO using SAML 2.0 or OIDC, and integrations with Azure AD or Okta is advantageous.
• Exposure to Cloud ALM security and SAP BTP trust configuration is beneficial.
• SAP GRC or SAP Security certification is a plus.
• Strong analytical, communication, stakeholder-management, and problem-solving skills.
• Willingness and ability to work a US shift, approximately 5:30 PM to 2:30 AM IST.
• Immediate to 30-day availability is preferred.

Benefits

• Full-time, permanent employment.
• Remote work opportunity from anywhere in India, with the role aligned to a US shift.
• Opportunity to work on enterprise-scale SAP S/4HANA, GRC, and BTP security environments.
• Exposure to modern cloud security, identity governance, access-risk management, and compliance initiatives.
• Opportunity to collaborate with business stakeholders, SAP COE teams, IAM specialists, Basis teams, and functional experts.
• Senior-level scope with the opportunity to influence security architecture, governance standards, and audit readiness.
• Professional growth through exposure to complex hybrid SAP landscapes and evolving cloud technologies.