Lead Consultant(Development)

HCL Technologies Limited; Dadri; On-site; INR 1,800,000 - 2,400,000; Full time

Job summary

HCLTech in India is seeking an experienced SAP Security & IAG Consultant with 8-9 years of hands-on expertise across SAP Security, GRC, and SAP Cloud Identity Access Governance solutions.

You will design roles, manage user provisioning, conduct risk analysis, SoD controls, and support SAP landscapes including ECC, S/4HANA, BW, CRM, SRM, Fiori, and SAP BTP, while aligning with audit and compliance requirements.

Strong communication and collaboration with global teams and auditors is essential.

Qualifications

• 8-9 years of SAP Security and GRC experience.
• Experience with SAP S/4HANA security.
• Understanding of SoD risk analysis.
• Experience with SAP Cloud Identity Access Governance (IAG).

Responsibilities

• Design, build, and maintain SAP roles and authorizations across SAP systems.
• Perform user administration activities including user creation, modification, locking/unlocking, and access reviews.
• Conduct security analysis and troubleshoot authorization issues.
• Support SAP ECC, S/4HANA, BW, CRM, SRM, Fiori, and SAP BTP environments.
• Implement and support SAP Cloud Identity Access Governance (IAG).
• Configure Access Request Management (ARM), Access Risk Analysis (ARA), and Role Design functionalities.
• Integrate SAP IAG with SAP IAS, IPS, S/4HANA, SuccessFactors, Ariba, and third-party apps.
• Manage user provisioning and deprovisioning workflows.
• Support emergency access and access certification processes.
• Perform SoD risk analysis and mitigation controls.
• Ensure compliance with audit and regulatory requirements.
• Collaborate with Internal Audit, Compliance, and Business teams during audits.
• Maintain risk rulesets and monitor critical access risks.
• Review and optimize role designs based on least-privilege principles.
• Conduct periodic access reviews and user recertification activities.
• Develop and maintain security documentation, procedures, and SOPs.
• Participate in security transformation and migration projects.

Skills

SAP Security

IAG (Identity Access Governance)

GRC

SoD analysis

User provisioning

Tools

SU01

PFCG

SU24

SU53

ST01

Job description

We are seeking an experienced SAP Security & Identity Access Governance (IAG) Consultant with 8-9 years of experience in SAP Security, GRC, and SAP Cloud Identity Access Governance solutions. The ideal candidate should have strong expertise in SAP authorization concepts, role design, risk analysis, SoD (Segregation of Duties), user provisioning, and compliance processes across SAP landscapes.

Key Responsibilities

SAP Security Administration

• Design, build, and maintain SAP roles and authorizations across SAP systems.
• Perform user administration activities including user creation, modification, locking/unlocking, and access reviews.
• Conduct security analysis and troubleshoot authorization issues.
• Support SAP ECC, S/4HANA, BW, CRM, SRM, Fiori, and SAP BTP environments.

SAP IAG (Identity Access Governance)

• Implement and support SAP Cloud Identity Access Governance (IAG).
• Configure Access Request Management (ARM), Access Risk Analysis (ARA), and Role Design functionalities.
• Integrate SAP IAG with SAP IAS, IPS, S/4HANA, SuccessFactors, Ariba, and third-party applications.
• Manage user provisioning and deprovisioning workflows.
• Support emergency access and access certification processes.

SAP GRC & Compliance

• Perform Segregation of Duties (SoD) risk analysis and mitigation controls.
• Ensure compliance with audit and regulatory requirements.
• Collaborate with Internal Audit, Compliance, and Business teams during audits.
• Maintain risk rulesets and monitor critical access risks.

Security Governance

• Review and optimize role designs based on least-privilege principles.
• Conduct periodic access reviews and user recertification activities.
• Develop and maintain security documentation, procedures, and SOPs.
• Participate in security transformation and migration projects.

Skill Requirements

Technical Skills

• Strong expertise in SAP Security and Authorization concepts.
• Hands-on experience with SAP IAG implementation and support.
• SAP GRC Access Control knowledge.
• Experience in:
• SAP S/4HANA Security
• SAP ECC Security
• SAP BTP Security
• SAP IAS & IPS
• SU01, PFCG, SU24, SU53, ST01
• Role Design and User Administration

Functional Knowledge

• Understanding of Finance, Procurement, Sales, and HR business processes.
• Knowledge of Segregation of Duties (SoD) and audit controls.
• Experience with SAP S/4HANA transformation projects.

Soft Skills

• Strong communication and stakeholder management skills.
• Analytical and problem-solving abilities.
• Ability to work independently and within global teams.
• Experience interacting with auditors and compliance teams.

Nice to Have

• SAP SuccessFactors Security.
• SAP Ariba Security.
• SAP Business Technology Platform (BTP) Security.
• Experience with Identity Management (IDM), SailPoint, or Azure AD integrations.

At HCLTech, you'll supercharge your potential. You'll find your career. And you'll find your spark. All at a place that knows that helping its customers stay on top starts by putting its people first.

HCLTech is a global technology company, home to more than 223,000 people across 60 countries, delivering industry-leading capabilities centered around digital, engineering, cloud and AI, powered by a broad portfolio of technology services and products. We work with clients across all major verticals, providing industry solutions for Financial Services, Manufacturing, Life Sciences and Healthcare, Technology and Services, Telecom and Media, Retail and CPG, and Public Services. Consolidated revenues as of 12 months ending June 2026totaled $14.8billion.