SAP GRC AC Consultant
Confirmed on the employer's own hiring board on Oct 18, 2026. First seen by Alion on Oct 15, 2026. NTT DATA scores B on the Alion truth index.
India T&M Special Bonus:
JD 3: SAP GRC AC
Hands-on SAP GRC Access Control Consultant to support, enhance and operate the enterprise access governance landscape. The role will configure and support SAP GRC Access Control capabilities across Access Request Management, Access Risk Analysis, Emergency Access Management and Business Role Management.
You will work with SAP Security, business stakeholders, role owners, Risk, Compliance, Internal Audit and technical teams to deliver secure, compliant and auditable access processes across SAP and integrated applications.
What you will be doing (Role Accountabilities)
- Configure and enhance SAP GRC Access Control 10.1/12.0 capabilities across ARM, ARA, EAM and BRM.
- Support access request workflows from requirement analysis through configuration, testing, deployment and post-production support.
- Configure and troubleshoot MSMP workflows, BRF+ rules, agent determination, path selection, notifications and escalation behaviour.
- Perform Segregation of Duties and sensitive-access risk analysis at user, role, profile and request level.
- Support risk remediation, mitigating control assignment, control monitoring and evidence preparation.
- Administer Emergency Access Management, including Firefighter IDs, owners, controllers, logs and review workflows.
- Support business-role creation, maintenance, import, approval and reconciliation processes within BRM.
- Monitor connectors, sync jobs, provisioning, repository objects and scheduled background jobs.
- Investigate incidents and service requests, perform root-cause analysis and implement sustainable fixes within agreed service levels.
- Support SAP ECC, S/4HANA and Fiori access-governance requirements, including role and authorisation dependencies.
- Coordinate transports across development, test and production environments, including pre-deployment checks and post-implementation validation.
- Prepare operational reports, audit evidence, SOPs, runbooks, knowledge-transfer material and configuration documentation.
- Contribute to continuous improvement and automation of access requests, review, compliance and reporting processes.
- Work as an effective team member, communicate progress clearly and raise risks or dependencies promptly.
What you’ll need to succeed (Skills & Experience)
- 4-6 years of overall experience in SAP Security and/or SAP GRC, with at least 3 years of relevant hands-on SAP GRC Access Control experience.
- Practical experience in at least three SAP GRC Access Control modules: ARM, ARA, EAM and BRM.
- Hands-on knowledge of MSMP workflow configuration and BRF+ rules.
- Strong understanding of SoD, sensitive access, risk analysis, mitigation and access governance concepts.
- Working knowledge of SAP role design, user administration, authorisation objects, SU24 concepts and security troubleshooting.
- Experience supporting SAP ECC or S/4HANA environments; exposure to Fiori security is desirable.
- Ability to analyse production issues, document root cause and coordinate fixes across functional and technical teams.
- Ability to work with business users, auditors and technical stakeholders.
- Understanding of ITGC, audit evidence, change control and controlled production-support practices.
Core functional skills
Technical skills
Desirable exposure
ARM, ARA, EAM and BRM
SoD and sensitive-access analysis
Mitigating controls
User Access Review support
Access provisioning governance
MSMP and BRF+
SPRO configuration
SAP role and authorisation concepts
S/4HANA and Fiori security
Transport and defect management
SAP IAG or SailPoint integration
SuccessFactors or non-SAP applications
SAP CPI, APIs or OData
Process Control awareness
6-9 years
India BLR/Gurgaon
Work model Hybrid - Mandatory 3 days from NTTD office
Client Interview is mandatory for selected candidates