Lead Consultant(Development)

HCL Technologies Limited; Bengaluru; On-site; INR 1,600,000 - 2,200,000; Full time

Job summary

HCL Technologies Limited seeks a SAP Security, GRC & Fiori Security Consultant to design, implement, and maintain SAP security across ECC, S/4HANA, BW, CRM, and SCM. You will handle user provisioning, role development, SoD analysis, and support GRC modules, while collaborating with auditors to ensure regulatory compliance.

Location is Bengaluru with client-site requirements. The role emphasizes security testing, architecture, and cross-functional governance to safeguard SAP environments.

Qualifications

• Design, implement SAP Security roles across ECC, S/4HANA, BW, CRM, SCM.
• Administer user provisioning and access reviews per security policies.
• Develop master/composite roles based on business needs and SoD principles.

Responsibilities

• Design and maintain SAP Fiori security architecture and OData service authorizations.
• Support SAP GRC Access Control modules (ARA, ARM, EAM, BRM).
• Perform SoD risk analysis, remediation, and compliance reporting.
• Collaborate with stakeholders and auditors to ensure regulatory requirements are met.
• Support audits with security documentation and access reports.

Skills

SAP Security

GRC

Fiori Security

User provisioning

SoD analysis

Access Control

BTP Security

Tools

SU53

ST01

SUIM

PFCG

Job description

SAP Security, GRC & Fiori Security Consultant – Job Description

• Design, implement, and maintain SAP Security roles and authorizations across SAP ECC, S/4HANA, BW, CRM, SCM, and related SAP applications.
• Perform user administration activities including user provisioning, modifications, deactivation, and access reviews in compliance with security policies.
• Develop and maintain single, composite, derived, and master roles based on business requirements and segregation of duties principles.
• Conduct SAP authorization analysis and troubleshooting using tools such as SU53, ST01, SUIM, PFCG, and security audit logs.
• Implement and support SAP GRC Access Control modules including Access Risk Analysis (ARA), Access Request Management (ARM), Emergency Access Management (EAM), and Business Role Management (BRM).
• Perform Segregation of Duties (SoD) risk analysis, remediation, mitigation control reviews, and compliance reporting.
• Collaborate with business stakeholders, auditors, and functional teams to ensure security controls meet regulatory and organizational requirements.
• Support internal and external audits by providing security documentation, user access reports, role design evidence, and compliance assessments.
• Design and maintain SAP Fiori security architecture, including catalogs, groups/spaces, pages, business roles, and OData service authorizations.
• Configure and troubleshoot SAP Gateway and Fiori Launchpad security issues, including activation of OData services and ICF services.
• Perform security testing and validation for SAP upgrades, enhancement packs, support packs, and transformation projects such as ECC to S/4HANA migrations.
• Analyze and optimize role design to ensure least-privilege access while improving operational efficiency and reducing security risks.
• Develop and maintain security standards, operating procedures, documentation, and governance processes for SAP environments.
• Support SAP Identity and Access Management integrations, including IDM, IAS, IPS, and third-party provisioning solutions.
• Participate in project lifecycle activities including requirement gathering, security design, testing, cutover support, and post-go-live stabilization.

Additional Responsibilities – SAP BTP Security

• Design and manage SAP BTP security concepts, including global accounts, subaccounts, role collections, and authorization assignments.
• Configure and support SAP Identity Authentication Service (IAS), Identity Provisioning Service (IPS), Single Sign-On (SSO), and federated identity integrations within SAP BTP.

Implement and monitor security controls for SAP BTP services, ensuring compliance with enterprise security standards, user access governance, and cloud security best practices

Key Responsibilities

SAP Security, GRC & Fiori Security Consultant – Job Description

• Design, implement, and maintain SAP Security roles and authorizations across SAP ECC, S/4HANA, BW, CRM, SCM, and related SAP applications.
• Perform user administration activities including user provisioning, modifications, deactivation, and access reviews in compliance with security policies.
• Develop and maintain single, composite, derived, and master roles based on business requirements and segregation of duties principles.
• Conduct SAP authorization analysis and troubleshooting using tools such as SU53, ST01, SUIM, PFCG, and security audit logs.
• Implement and support SAP GRC Access Control modules including Access Risk Analysis (ARA), Access Request Management (ARM), Emergency Access Management (EAM), and Business Role Management (BRM).
• Perform Segregation of Duties (SoD) risk analysis, remediation, mitigation control reviews, and compliance reporting.
• Collaborate with business stakeholders, auditors, and functional teams to ensure security controls meet regulatory and organizational requirements.
• Support internal and external audits by providing security documentation, user access reports, role design evidence, and compliance assessments.
• Design and maintain SAP Fiori security architecture, including catalogs, groups/spaces, pages, business roles, and OData service authorizations.
• Configure and troubleshoot SAP Gateway and Fiori Launchpad security issues, including activation of OData services and ICF services.
• Perform security testing and validation for SAP upgrades, enhancement packs, support packs, and transformation projects such as ECC to S/4HANA migrations.
• Analyze and optimize role design to ensure least-privilege access while improving operational efficiency and reducing security risks.
• Develop and maintain security standards, operating procedures, documentation, and governance processes for SAP environments.
• Support SAP Identity and Access Management integrations, including IDM, IAS, IPS, and third-party provisioning solutions.
• Participate in project lifecycle activities including requirement gathering, security design, testing, cutover support, and post-go-live stabilization.

Additional Responsibilities – SAP BTP Security

• Design and manage SAP BTP security concepts, including global accounts, subaccounts, role collections, and authorization assignments.
• Configure and support SAP Identity Authentication Service (IAS), Identity Provisioning Service (IPS), Single Sign-On (SSO), and federated identity integrations within SAP BTP.

Implement and monitor security controls for SAP BTP services, ensuring compliance with enterprise security standards, user access governance, and cloud security best practices

Skill Requirements

SAP Security, GRC & Fiori Security Consultant – Job Description

• Design, implement, and maintain SAP Security roles and authorizations across SAP ECC, S/4HANA, BW, CRM, SCM, and related SAP applications.
• Perform user administration activities including user provisioning, modifications, deactivation, and access reviews in compliance with security policies.
• Develop and maintain single, composite, derived, and master roles based on business requirements and segregation of duties principles.
• Conduct SAP authorization analysis and troubleshooting using tools such as SU53, ST01, SUIM, PFCG, and security audit logs.
• Implement and support SAP GRC Access Control modules including Access Risk Analysis (ARA), Access Request Management (ARM), Emergency Access Management (EAM), and Business Role Management (BRM).
• Perform Segregation of Duties (SoD) risk analysis, remediation, mitigation control reviews, and compliance reporting.
• Collaborate with business stakeholders, auditors, and functional teams to ensure security controls meet regulatory and organizational requirements.
• Support internal and external audits by providing security documentation, user access reports, role design evidence, and compliance assessments.
• Design and maintain SAP Fiori security architecture, including catalogs, groups/spaces, pages, business roles, and OData service authorizations.
• Configure and troubleshoot SAP Gateway and Fiori Launchpad security issues, including activation of OData services and ICF services.
• Perform security testing and validation for SAP upgrades, enhancement packs, support packs, and transformation projects such as ECC to S/4HANA migrations.
• Analyze and optimize role design to ensure least-privilege access while improving operational efficiency and reducing security risks.
• Develop and maintain security standards, operating procedures, documentation, and governance processes for SAP environments.
• Support SAP Identity and Access Management integrations, including IDM, IAS, IPS, and third-party provisioning solutions.
• Participate in project lifecycle activities including requirement gathering, security design, testing, cutover support, and post-go-live stabilization.

Additional Responsibilities – SAP BTP Security

• Design and manage SAP BTP security concepts, including global accounts, subaccounts, role collections, and authorization assignments.
• Configure and support SAP Identity Authentication Service (IAS), Identity Provisioning Service (IPS), Single Sign-On (SSO), and federated identity integrations within SAP BTP.

Implement and monitor security controls for SAP BTP services, ensuring compliance with enterprise security standards, user access governance, and cloud security best practices

Other Requirements

Working from Client location in Bangalore only

At HCLTech, you'll supercharge your potential. You'll find your career. And you'll find your spark. All at a place that knows that helping its customers stay on top starts by putting its people first.

HCLTech is a global technology company, home to more than 223,000 people across 60 countries, delivering industry-leading capabilities centered around digital, engineering, cloud and AI, powered by a broad portfolio of technology services and products. We work with clients across all major verticals, providing industry solutions for Financial Services, Manufacturing, Life Sciences and Healthcare, Technology and Services, Telecom and Media, Retail and CPG, and Public Services. Consolidated revenues as of 12 months ending June 2026totaled $14.8billion.