Security Consultant

SAP Security Consultant (GRC)

Job Summary:
We are seeking an experienced SAP Security Consultant with strong expertise in GRC Access Control, segregation of duties (SoD), and role/profile management across SAP systems. The consultant will be responsible for supporting the design, validation, and governance of access controls in line with compliance and audit requirements. Experience with SuccessFactors security concepts is a plus, but not mandatory.

Key Responsibilities:

• Design, validate, and manage roles and authorizations across SAP systems (ECC, S/4HANA, BW, etc.).
• Perform SoD analysis and remediation using SAP GRC Access Control.
• Liaise with international GRC team to ensure role definitions and standards match implementation.
• Lead security alignment workshops with third party vendor
• Maintain and improve security roles aligned with business requirements and compliance standards.
• Conduct periodic access reviews and collaborate with internal audit teams.
• Support user provisioning, role assignments, and compliance validation processes.
• Participate in security testing and change management processes.
• Provide documentation and training to business and IT users.
• Validate role and profile structures within SSFF against global compliance policies
• Support integration with SuccessFactors and other cloud systems (if applicable).
• Ensure audit readiness and segregation of duties (SoD) integrity

• Minimum 7 years of experience in SAP Security and GRC Access Control.
• Strong knowledge of SoD principles, access risks, and mitigation strategies.
• Hands-on experience with role design, user access validation, and GRC workflows.
• Familiarity with compliance/audit frameworks (e.g., SOX).
• Ability to communicate in intermediate English, both written and spoken.
• Strong teamwork and documentation skills.
• Intermediate level of English is required.

• Exposure to SAP SuccessFactors security concepts (permissions, RBP model).
• Knowledge of SAP Cloud Security or SAP Identity Management (IdM).
• Experience in S/4HANA security design and Fiori role maintenance.