Key Responsibilities:
SAP GRC & IAG Implementation: Lead the design and deployment of SAP
GRC Access Control (AC) and Identity Access Governance (IAG) solutions.
Integration of SAP GRC Access Control and Saviynt - Define integration
scenarios, pros n cons, RACI model, JML processes.
Security Architecture: Define and maintain SAP security architecture across
SAP S/4HANA, SAP BTP, SAP Fiori, and cloud environments.
Role Design & SoD Compliance: Develop and maintain role-based access
control (RBAC), rule sets, and segregation of duties (SoD) compliance
frameworks.
SAP Security Administration: Oversee user provisioning, privileged access
management, and security audits.
Cloud & Hybrid Security: Implement security controls for SAP Cloud Identity
Services, SAP IAG, and integrations with third-party IAM solutions.
Risk & Compliance Management: Ensure alignment with SOX, GDPR, ISO
27001, and NIST security standards.
Stakeholder Collaboration: Partner with business, IT, audit, and compliance
teams to implement security best practices and automation.
Core Skills & Qualifications:
SAP GRC & IAG Expertise: Hands-on experience with SAP GRC 12.0, SAP IAG,
Access Control, ARA, ARM, EAM, BRM, and Risk Analysis.
SAP Security & Authorization: Strong understanding of S/4HANA, Fiori,
BW/4HANA, BTP, and cloud security.
SoD & Compliance Knowledge: Familiarity with audit controls, risk frameworks,
and security regulations (SOX, GDPR, etc.).
SAP Cloud Security: Experience with SAP Cloud Identity, SSO, OAuth, SAML,
and integration with Azure AD, Okta, or Ping.
Technical Skills: SAP ABAP security, SU24, STAD logs, table logging, security
patches, and system hardening.