Consultant | SAP Security & GRC AC | Ahmedabad | SAP | DSA LS&HC

Deloitte & Touche GmbH Wirtschaftsprüfungsgesellschaft; Gujarat; On-site; INR 1,200,000 - 2,100,000; Full time

Job summary

Deloitte Touche Tohmatsu India LLP in Ahmedabad is seeking a Consultant to specialize in SAP Security & GRC across ECC, S/4HANA, and Fiori. You will design roles, manage authorizations, and ensure access governance aligns with business objectives.

Ideal candidates have 4–7 years of hands-on SAP security experience, strong RBAC knowledge, and experience with SAP GRC or IAM tools. The role involves collaborative workshops, stakeholder management, and delivering secure, scalable SAP access

Qualifications

• 4–7 years of hands-on SAP Security and Authorization experience.
• Strong expertise in SAP role design and user administration.
• Experience with SAP GRC, IAM, and access governance concepts.
• Excellent stakeholder management and workshop facilitation.

Responsibilities

• Design, build, and maintain SAP Security roles and authorizations across SAP ECC, SAP S/4HANA, Fiori.
• Lead role design, user access management, and authorization activities across projects.
• Analyze SDDs and business requirements to define access controls and role needs.
• Conduct workshops with stakeholders to align access governance with business objectives.
• Design and implement SAP RBAC, authorization concepts, and security governance frameworks.
• Support SAP Fiori security configuration and role mappings.
• Troubleshoot security issues and provide timely resolutions during projects.
• Assist IAM and access governance solutions including provisioning and approvals.
• Collaborate with Security, Functional, BASIS, Infrastructure, and Architecture teams.
• Support SoD analysis, access reviews, and audit activities.

Skills

SAP Security

Authorization management

RBAC design

SoD knowledge

IAM concepts

Stakeholder management

Workshop facilitation

Documentation skills

Security architecture

Education

Bachelor's degree in CS/IT/Engineering

SAP GRC / IAG certifications

Cybersecurity certifications

Tools

SAP GRC Access Control

SAP Identity Access Governance (IAG)

SailPoint ISC

Job description

Job Title: Consultant | SAP Security & GRC AC | Ahmedabad | SAP | DSA LS&HC

Consultant | SAP Security & GRC AC | Ahmedabad | SAP | DSA LS&HC
Job requisition ID : 113310
Location: Ahmedabad
Entity: Deloitte Touche Tohmatsu India LLP

The team

Enterprise technology must do much more than keep the wheels turning; it is the engine that drives functional excellence and the enabler of innovation and long-term growth. Learn more about ET&P

• Design, build, and maintain SAP Security roles and authorizations across SAP ECC, SAP S/4HANA, Fiori, and related SAP applications.
• Lead role design, role build, user access management, and authorization activities across implementation, rollout, transformation, and support engagements.
• Analyze Solution Design Documents (SDDs), business requirements, and process designs to define appropriate access controls, transaction authorizations, and Fiori role requirements.
• Conduct workshops with business stakeholders, Functional Leads, Process Owners, and Solution Architects to gather security requirements and align access governance with business objectives.
• Design and implement SAP role-based access controls (RBAC), authorization concepts, and security governance frameworks.
• Support SAP Fiori security configuration, catalog design, group management, space/page assignments, and role mappings.
• Troubleshoot security and authorization issues, investigate access-related incidents, and provide timely resolutions during project and support activities.
• Support implementation and enhancement of SAP Identity & Access Management (IAM) and Access Governance solutions, including access request workflows, approval processes, user provisioning, and compliance controls.
• Collaborate with Security, Functional, BASIS, Infrastructure, and Architecture teams to implement scalable security controls across SAP landscapes.
• Support segregation of duties (SoD) analysis, sensitive access monitoring, user access reviews, compliance assessments, and audit activities.
• Contribute to security architecture documentation, governance frameworks, risk assessments, and security design decisions.
• Act as a key contributor to SAP Security and IAM initiatives, providing guidance on access controls, governance, compliance, and best practices.
• Provide mentoring and knowledge sharing to junior team members and support continuous improvement initiatives.

Key Requirements

• 4-7 years of hands-on SAP Security and Authorization experience in SAP ECC and/or SAP S/4HANA environments.
• Strong expertise in SAP role design, role build, authorization concepts, user administration, and access management processes.
• Hands-on experience with SAP Security objects, authorization troubleshooting, user provisioning, and access control frameworks.
• Strong understanding of SAP Fiori security concepts, including Launchpad roles, catalogs, groups, spaces, pages, and role-based access design.
• Experience analyzing business requirements and translating them into secure and scalable SAP authorization solutions.
• Knowledge of Segregation of Duties (SoD), sensitive access management, user access reviews, audit controls, and governance processes.
• Exposure to SAP Access Governance and Identity Management solutions such as SAP GRC Access Control, SAP Identity Access Governance (IAG), SailPoint ISC, or similar tools.
• Experience supporting security activities during implementation, rollout, upgrade, transformation, and support projects.
• Strong stakeholder management, workshop facilitation, and communication skills.
• Ability to work independently with business, functional, technical, and security teams to drive security outcomes.
• Experience contributing to security architecture, compliance initiatives, and enterprise IAM programs is highly desirable.
• Strong analytical, troubleshooting, problem-solving, and documentation skills.

Education

• Bachelor's degree in Computer Science, Information Technology, Engineering, Cybersecurity, or a related discipline.
• SAP Security, SAP GRC Access Control, SAP IAG, or Identity & Access Management certifications are preferred.
• Relevant certifications in Cybersecurity, Access Governance, Risk Management, or Information Security will be an added advantage.
• Experience with enterprise IAM platforms, audit compliance frameworks, and SAP security governance programs is desirable.