[KLUE1O72] SAP Security GRC Consultant

ZettaMine Labs Pvt. Ltd.; Bengaluru; On-site; INR 1,800,000 - 2,800,000; Full time

Job summary

ZettaMine Labs Pvt. Ltd. Bengaluru seeks an experienced SAP Security GRC specialist to design, implement, and optimize access controls across SAP landscapes, ensuring compliance with internal policies and external regulatory requirements.

You will lead SoD analyses, maintain roles and authorizations, collaborate with audit and IT teams, and drive GRC workflows. Mentorship of junior engineers and collaboration with ABAP developers on security objects are part of the role.

Qualifications

• 6-8 years of experience in SAP Security GRC.
• Mandatory skills: SAP ACS (GRC), SAP GRC AC-PC.

Responsibilities

• Lead and manage SAP Security and GRC initiatives across SAP landscapes.
• Design, implement, and maintain SAP roles, authorizations, and security profiles.
• Drive SoD analysis, remediation, and mitigation control design.
• Partner with business, internal audit, compliance, and IT teams to ensure governance, risk, and control requirements.
• Implement, maintain, and enhance GRC workflows.
• Oversee SAP GRC Access Control processes.
• Build, deploy, and maintain SAP user roles and authorizations.
• Support the implementation of access and roles in adherence with corporate standards and policies.
• Optimize security definitions, identify inefficiencies, and propose solutions.
• Collaborate with Lead Engineer to execute the technical plan.
• Monitor and troubleshoot access issues across environments.
• Mentor junior engineers and lead knowledge-sharing initiatives.

Tools

SAP ACS (GRC)

SAP GRC AC-PC

Job description

Design, implement, and optimize security authorizations and roles across the SAP landscape, ensuring compliance with internal policies and external regulatory requirements. Deliver technical solutions and operational support that align with business objectives and security standards.

Responsibilities

• Lead and manage SAP Security and GRC initiatives across SAP landscapes
• Design, implement, and maintain SAP roles, authorizations, and security profiles
• Drive Segregation of Duties (SoD) analysis, remediation, and mitigation control design
• Partner with business, internal audit, compliance, and IT teams to ensure adherence to governance, risk, and control requirements
• Implement, maintain, and enhance GRC workflows
• Oversee and operate SAP GRC Access Control processes
• Build, deploy, and maintain SAP user roles and authorizations
• Support the implementation of access and roles in adherence with corporate standards and policies
• Optimize security definitions, identify inefficiencies, and propose solutions that strengthen system security and compliance
• Contribute to the cleanup of obsolete roles in line with the organization's role strategy roadmap
• Implement security best practices to safeguard SAP resources and ensure data protection
• Support compliance efforts, ensuring all systems meet industry standards and regulatory requirements
• Support audit activities and provide requested evidence on time
• Run SoD reports, analyze risks within existing roles and authorizations, and remediate identified risks on time
• Design and maintain mitigating controls where remediation is not feasible with clear ownership and review cadence
• Collaborate with the Lead Engineer to execute the technical plan, contributing insights on process improvement and optimization
• Monitor and troubleshoot access issues across all environments
• Identify cost-optimization opportunities and assist in tracking and eliminating unused or underutilized resources to support cost-saving initiatives
• Mentor junior engineers and lead knowledge-sharing initiatives across the team
• Collaborate with the Lead Engineer and team members to execute work programs aligned with business and corporate strategies
• Partner with ABAP developers on custom authorization objects and security process enhancements
• Engage with vendors and service providers, ensuring technical requirements and project deliverables are met
• Collaborate with internal stakeholders to support project delivery, ensuring clear communication on changes and progress
• Maintain detailed documentation of system configurations, changes, and procedures to ensure operational continuity and compliance
• Report on security risks and issues, providing recommendations for remediation as necessary

Requirements

• 6-8 years of experience in SAP Security GRC
• Mandatory skills: SAP ACS (GRC), SAP GRC AC-PC