Own SAP security administration, GRC Access Control, and compliance audits for S/4HANA and Fiori environments.
This role is on-site.
Responsibilities
Design, build, and maintain SAP security roles using PFCG, including mass maintenance of authorization content and org-level changes.
Administer SAP GRC Access Control 10.x/12.x modules, including Access Risk Analysis (ARA), Access Request Management (ARM), Emergency Access Management (EAM), and Business Role Management (BRM).
Manage transport requests for security roles using ChaRM and support user administration activities such as creation, lock/unlock, and password resets.
Conduct Segregation of Duties (SoD) analysis, remediation, and periodic user access reviews (UAR) to ensure compliance with SOX and corporate policies.
Troubleshoot authorization issues using SU01, PFCG, SUIM, ST01, STAUTHTRACE, and SU53, and provide production support for security incidents.
Required Skills
10+ years of SAP Security and GRC experience.
Strong knowledge of SAP S/4HANA security, SAP Fiori security, and SAP HANA Database security.
Experience with SAP GRC Access Control 10.x/12.x and SoD concepts.
Proficiency in role design, authorization objects, and custom T-codes.
Experience supporting SAP FIORI, S/4HANA, BI/BW, and GTP applications.
Ability to work with internal and external auditors to provide security documentation and evidence.
Strong analytical, troubleshooting, and stakeholder management skills.
Excellent documentation and reporting abilities.
Preferred Skills
Experience with SAP implementation, upgrade, migration, and enhancement projects.
Knowledge of SAP Business Role Management (BRM) best practices.