SAP Security & GRC Consultant

Yoda Tech is seeking an experienced SAP Security & GRC Consultant to provide Level 2 (L2) support for SAP security operations, access governance, and identity management in an enterprise environment.

The ideal candidate will have hands-on experience in SAP S/4HANA Security, SAP GRC Access Control, and SAP authorization management.

Knowledge of SAP Cloud Identity Services (CIS), Identity Authentication Service (IAS), and Identity Provisioning Service (IPS) will be an advantage.

The role involves user administration, role management, access risk analysis, compliance monitoring, identity provisioning, and troubleshooting security-related incidents while ensuring adherence to enterprise security policies and service-level agreements.

Key Responsibilities :

1. SAP Security Administration :

- Perform user administration activities, including user creation, modification, locking, unlocking, and deletion.

- Manage SAP authorization concepts across SAP landscapes.

- Design, develop, modify, and maintain single, composite, and derived roles.

- Troubleshoot authorization issues and resolve access-related incidents.

- Execute role assignments and transport security objects across development, testing, and production environments.

- Conduct security audits and compliance reviews to ensure adherence to access control policies.

2. SAP GRC Access Control :

- Support SAP GRC Access Control modules, including : Access Risk Analysis (ARA), Access Request Management (ARM), Emergency Access Management (EAM), and Business Role Management (BRM).

- Analyse Segregation of Duties (SoD) conflicts and recommend appropriate mitigation controls.

- Manage firefighter IDs and monitor emergency access activities.

- Review and maintain mitigating control documentation.

- Support access governance processes and compliance requirements.

3. SAP S/4HANA Security :

- Support SAP S/4HANA security implementation and operational activities.

- Manage SAP Fiori security, including catalogs, groups/spaces, pages, and business roles.

- Troubleshoot Fiori authorization issues using standard SAP tools.

- Support security requirements across SAP Fiori, SAP GUI, and embedded applications.

- Collaborate with business and functional teams to design secure access solutions.

4. SAP Cloud Identity Services - CIS / IAS / IPS :

- Support SAP Cloud Identity Services (CIS), including Identity Authentication Service (IAS) and Identity Provisioning Service (IPS).

- Troubleshoot Single Sign-On (SSO) and authentication issues involving SAML 2.0 and OpenID Connect (OIDC).

- Support identity federation with Microsoft Entra ID (Azure AD).

- Manage user provisioning and de-provisioning processes.

- Support identity integration with SAP SuccessFactors and SAP Ariba.

- Assist with identity lifecycle management and authentication-related access governance.

- Troubleshoot IAS/IPS synchronisation and provisioning issues.

5. Incident & Service Management :

- Handle L2 SAP security support tickets within defined service-level agreements (SLAs).

- Perform root cause analysis for recurring security issues and implement corrective actions.

- Coordinate with Level 3 support teams to resolve complex security incidents.

- Participate in system upgrades, patching, and project-related security activities.

- Maintain operational documentation and prepare security reports and dashboards.

- Follow ITIL processes and established incident, problem, and change management procedures.

Required Skills & Qualifications :

- 4 - 7 years of experience in SAP Security, SAP Authorizations, or SAP Security & GRC support.

- Hands-on experience with SAP GRC Access Control and its relevant modules.

- Experience supporting SAP S/4HANA security environments.

- Strong understanding of SAP role design, role maintenance, and user administration.

- Knowledge of SoD analysis, access risk assessment, compliance monitoring, and security audits.

- Familiarity with SAP Fiori security concepts and authorization troubleshooting.

- Experience with transport management and security-related incident resolution.

- Understanding of SAP Basis concepts relevant to security administration.

- Familiarity with ITIL processes and ticketing tools such as ServiceNow, Jira, or Remedy.

Preferred Skills :

- Experience with SAP IAS, IPS, and CIS implementations or operations.

- Knowledge of SAML 2.0, OIDC, identity federation, and SSO troubleshooting.

- Exposure to SAP Business Technology Platform (BTP) security concepts.

- Familiarity with SAP SuccessFactors, SAP BW/4HANA, SAP Ariba, SAP MDG, or Salesforce security.

- SAP Security and/or SAP GRC certifications.

Ideal Candidate Profile :

- The ideal candidate will be detail-oriented, analytical, and capable of resolving complex SAP access and identity management issues.

- They should be comfortable working in an enterprise support environment, collaborating with cross-functional teams, and maintaining strong security and compliance standards.

Skills

SAP Security, SAP GRC, GRC Tools, SAP IAS, SAP BRM, S/4 HANA, Security Administration, Entra ID, SAP Fiori, Security Risk Management