SAP Security/GRC Developer

Role: Developer. Skills: SAP GRC Security. Experience: 5 - 12 Years. Qualification: Bachelor Of Engineering

Must-Have

Security and Authorization Management

• User Management: Creating and deleting user accounts.
• Role Management: Setting up permissions (using PFCG) so people can only

  see the data they need to do their jobs.

Core

Technical Skills

• Authorization Concepts & Role Design: Deep knowledge of Profile Generator (PFCG) to build,

  modify, and troubleshoot security roles across SAP modules (e.g., ECC,

  S/4HANA).

• User Lifecycle Management: Proficiency in onboarding, offboarding, and administering system

  users, including Central User Administration (CUA).

• GRC Access Control: Experience with tools like Access Risk Analysis (ARA) to detect

  co nflicts and Business Role Management (BRM) to streamline roles.

• Fiori & S/4HANA Security: Understanding modern security frameworks, including OData

  services and Fiori Launchpad catalogs/groups.

• System Monitoring & Auditing: Ability to track system access using the Security Audit Log

  (SM19/SM20) and analyze system traces (ST01, ST05) to fix

  authorization errors.

Good-to-Have

Compliance

& Risk Management

• SoD (Segregation of Duties) Analysis: Understanding the rules that prevent a single user from having

  conflicting tasks (e.g., creating a vendor and approving the payment) to

  prevent fraud.

• Data Privacy Regulations: Familiarity with compliance standards like SOX, GDPR, and

  ISO/IEC 27001.