5-10+ years of hands-on SAP Security and GRC administration supporting large enterprise SAP environments.
Core Responsibilities
Administer and support SAP security, identity, roles, and authorizations across SAP S/4HANA, ECC, NetWeaver, Fiori, BW, GRC, and HANA environments.
Design, build, test, deploy, and maintain single, composite, derived, and business roles; authorization profiles and objects; organizational values; and user access.
Perform user lifecycle administration, including provisioning, deprovisioning, access modification, locking/unlocking, role assignment, privileged access, and periodic access reviews.
Support SAP GRC Access Control capabilities, including Access Risk Analysis, Access Request Management, and Emergency Access Management/Firefighter.
Execute Segregation of Duties and sensitive-access analysis, recommend mitigating controls, and coordinate remediation.
Troubleshoot complex authorization issues using authorization traces, role analysis, and related tools and techniques.
Design and maintain SAP Fiori security, including business roles, catalogs, spaces, pages, groups, services, OData authorizations, and backend/frontend role dependencies.
Support SAP HANA security, including database users, roles, privileges, and access controls where required.
Support security requirements for implementations, S/4HANA transformations, upgrades, migrations, system refreshes, and new deployments.
Review and manage privileged, emergency, technical, communication, service, and system accounts under defined security standards.
Support integration of SAP access processes with enterprise Identity and Access Management solutions where applicable.
Perform periodic role, user-access, inactive-user, and privileged-access reviews and associated remediation.
Support internal and external audits, compliance assessments, and regulatory reviews by providing evidence, access reports, role information, SoD analysis, and remediation documentation.
Investigate and resolve SAP security incidents and authorization-related production issues within agreed service levels.
Coordinate with SAP Basis, functional, development, IAM, cybersecurity, audit, compliance, and business teams.
Maintain role-design documents, security matrices, SOPs, access-control procedures, audit evidence, and operational runbooks.
Identify opportunities to automate access-management, reporting, compliance, and security-monitoring activities.
Required Skills
SAP Security and Authorizations; SAP GRC Access Control; SAP S/4HANA Security; SAP Fiori Security; SAP NetWeaver Security; SAP HANA Security; role design and maintenance; SoD analysis; user access management; privileged access management; audit and compliance support; authorization troubleshooting; and SAP security administration.
