Expert, ERP Business Analyst

SAP S/4HANA Fiori & GRC Consultant (Senior / Lead)

Experience: 10+ years
Role Type: Individual Contributor with Design & Advisory Ownership

Role Summary

As a Senior SAP S/4HANA Fiori & GRC Consultant, you will play a critical role in designing, securing, and governing SAP landscapes across S/4HANA, Fiori, GRC, and BW systems. You will lead complex security and compliance initiatives, ensure robust access controls, and partner closely with business, audit, and IT stakeholders to enable secure and scalable SAP transformations.

Take the Lead with These Responsibilities (Your Impactful Responsibilities)

SAP GRC - Access Control & Compliance

• Own end‑to‑end GRC Access Control Suite support, including configuration, enhancements, and issue resolution.
• Design, create, and maintain connectors and connector groups for ECC, S/4HANA, Fiori, BW, and other integrated systems.
• Create and manage Function IDs, Risk IDs, and Mitigation IDs, including rule set customization for new and evolving authorization requirements.
• Perform risk analysis and simulation, and drive risk remediation aligned with audit and compliance expectations.
• Design and maintain mitigation controls, assign mitigating risks, and support audit evidence requirements.
• Maintain and enhance role methodology using condition groups and ensure consistent access models across role types.
• Configure and manage Emergency User Privilege (EUP / Firefighter) for multiple usage scenarios.
• Configure and support password self‑service and access request workflows.
• Schedule, monitor, and troubleshoot GRC synchronization jobs.
• Extend and maintain custom risk and function rule sets, including support for S/4HANA, Fiori apps, and cloud applications.

• Design and implement Fiori Spaces and Pages aligned to business roles and personas.
• Lead migration from distributed Fiori architecture to embedded S/4HANA Fiori.
• Redesign Fiori landscapes by replacing Groups with Spaces & Pages, ensuring clean, scalable UX.
• Troubleshoot Fiori launchpad and app issues using:
• IWFND / IWBEP error logs
• Browser developer tools and console analysis
• Support and enhance Fiori App Support functionality to accelerate authorization and usability issue resolution.
• Partner with functional and technical teams to integrate Fiori security within Clean Core and SAP best‑practice principles.

• Lead role administration for SAP ECC, S/4HANA, and hybrid landscapes.
• Analyze and secure custom transactions and custom Fiori applications, including authorization object validation.
• Perform SU24 maintenance and SU25 execution (including during upgrades and conversions).
• Maintain table access security using SE54 and map tables to authorization groups.
• Configure organizational criteria and system security policies, including S_TABU_LIN.
• Restrict program execution using RSCSAUTH, S_PROGRAM, and S_PROGNAM.
• Design and maintain BW/BI Analysis Authorizations.
• Support ECC to S/4HANA security migration, including remediation and optimization.
• Execute compliance audits, SOX support, and audit remediation activities.
• Use SECATT, LSMW, and GUI scripting for mass user and role maintenance.

• Deep expertise in SAP GRC Access Control
• Strong hands‑on experience with SAP S/4HANA Fiori security
• Advanced knowledge of SAP Authorization concepts across ECC, S/4HANA, and BW
• Strong understanding of SU24, SU25, role remediation, and rule set design
• Experience securing custom programs, custom transactions, and Fiori apps
• Hands‑on troubleshooting across authorization failures, workflow errors, and integration issues

• Functional understanding of SAP modules (FI, MM, SD, etc.) to design business‑aligned security
• Experience with CFIN security
• Experience with MDG security
• Exposure to IAG (Identity Access Governance), cloud applications, and Fiori‑specific risk rules
• Ability to work in complex, global SAP landscapes

• Strong analytical and problem‑solving mindset
• Ability to engage confidently with audit, compliance, and senior IT stakeholders
• Strong documentation and communication skills
• Self‑driven, accountable, and capable of working independently in senior IC roles

• Work on large‑scale SAP S/4HANA transformations with modern security and UX landscapes
• Opportunity to influence enterprise security architecture and governance
• Exposure to latest SAP innovations including Fiori UX strategy, Clean Core, and cloud security
• Continuous learning through complex global programs, audits, and transformation initiatives
• A role that values deep expertise, ownership, and thought leadership
• Clear growth path into Lead Architect, Security Program Lead, or SAP GRC Practice roles

• You will report to the SAP Security / GRC Practice Lead or SAP Program Director.
• You will collaborate closely with:
• SAP functional and technical teams
• Compliance, audit, and risk stakeholders
• Basis, development, and integration teams
• This is a senior individual‑contributor role, with strong advisory and design ownership but no direct people management.