SAP GRC Access Control and SAP S/4HANA Security Specialist
Role Overview
We are seeking an experienced SAP GRC Access Control Specialist with SAP S/4HANA expertise to design, configure, and maintain our access governance, emergency access, and Segregation of Duties (SoD) framework. In this role, you will be responsible for end-to-end MSMP workflow design, Emergency Access Management (EAM), User Access Reviews (UAR), continuous risk analysis, and adapting GRC rules/workflows to support our S/4HANA and Fiori environment.
Key Responsibilities
S/4HANA & Security Integration (Core Focus)
· S/4HANA Access Governance: Adapt and optimize GRC Access Control rules, SoD risk matrices, and workflows specifically for SAP S/4HANA, including Fiori catalogs, target mappings, business roles, and S/4-specific authorization objects.
· Connector & Infrastructure Management: Setup, Maintain and troubleshoot GRC AC connectors to S/4HANA and other target systems.
SAP GRC Access Control Configuration & Operations
· MSMP Workflow Setup: Design, configure, and maintain Multi-Stage Multi-Path (MSMP) workflows for Access Risk Management (ARM), custom path routing, agent definitions, notification templates, and BRFplus decision rules.
· Emergency Access Management (EAM): Configure and manage Firefighter IDs (FFIDs), Firefighter roles, owners, controllers, reason codes, and automated EAM log review workflows across S/4HANA environments.
· Access Reviews & Certifications: Plan, launch, and manage periodic User Access Reviews (UAR) and SoD Role Re-certifications, streamlining manager and process owner approval workflows.
· Risk Analysis & Remediation (ARA): Configure Segregation of Duties (SoD) and Sensitive Access risk matrices for S/4HANA business processes, run risk analysis reports, and manage mitigating controls/assignments.
· Audit & Compliance Support: Audit Firefighter usage, log reviews, and access request approvals to ensure strict compliance with SOX and internal audit standards.
Required Skills & Qualifications
Required Skills
· SAP S/4HANA Experience (Required): Proven hands-on experience configuring GRC Access Control specifically within an SAP S/4HANA ecosystem, including deep knowledge of S/4HANA security concepts, Fiori tile/launchpad security, and updating GRC rule sets for S/4 processes.
· SAP GRC Access Control Expertise: Deep functional and technical hands-on experience in SAP GRC AC 12.0 covering ARA, ARM, EAM, and BRM modules.
· MSMP & BRF+ Rule Engine: Strong proficiency in configuring MSMP workflows, defining custom stages, paths, notification templates, and maintaining BRFplus decision tables/rules.
· EAM / FFID Governance: Solid experience setting up Firefighter IDs, controller assignments, notification alerts, and auditing EAM log reviews in S/4HANA.
· Access Review Administration: Proven capability in running UAR campaigns, tracking completion, and enforcing access revocation/remediation.
Preferred / Nice-to-Have Skills
· IAM Integration: Experience integrating GRC AC with enterprise Identity & Access Management systems (e.g., Azure AD, SailPoint, Okta).
· Certification: SAP Certified Application Associate – SAP Access Control / SAP Security.
Soft Skills
· High attention to detail regarding security compliance, risk mitigation, and audit trails.
· Strong communication skills to train Firefighter owners, controllers, and business approvers.
· Collaborative mindset to work closely with IT, Internal Audit, and Risk Management teams.
