You design, build, and maintain SAP GRC Access Control 10.x/12.x, managing security roles, access requests, and compliance workflows.
Responsibilities
- Design, build, and optimize single, composite, derived, and business roles for SAP ECC and S/4HANA.
- Implement and configure SAP GRC Access Control, including ARM, MSMP workflows, BRM, and EAM/Firefighter.
- Manage user administration, troubleshoot authorization issues using SU53 and STAUTHTRACE, and maintain Segregation of Duties (SoD) rules.
- Lead GRC upgrade projects (10.x/12.x), handling pre/post-validation, connector configuration, and repository synchronization.
- Support SAP Fiori and Business Partner authorization concepts, including catalog and space design.
Required Skills
- 12+ years of experience in SAP Security and GRC Access Control.
- Deep expertise in SAP GRC 10.x/12.x, including ARM, MSMP, BRM, and EAM.
- Proficiency in SAP ECC and SAP S/4HANA security architecture.
- Hands-on experience with SAP Fiori authorization concepts and role design.
- Strong knowledge of SAP transactions (SU01, SU10, PFCG, SUIM, PFUD, SU53, STAUTHTRACE).
- Experience with role synchronization, risk analysis, and compliance reporting.
- Bachelor's degree in a related field.
Preferred Skills
- Experience with SAP RISE, Private Cloud, and Hybrid landscape upgrades.
- Familiarity with SAP Business Partner (BP) authorization concepts.