Risk Management Consultant

EY; Bengaluru; On-site; INR 1,500,000 - 2,500,000; Full time

Job summary

EY in Bengaluru seeks a Consultant-National-Business Consulting Risk-CNS for RISK MANAGEMENT. You will design SAP security across ECC and S/4HANA, work on GRC implementations, and support audit remediation with a focus on least-privilege access.

The role requires 3–5 years of SAP Security & GRC experience and familiarity with Fiori security and S/4HANA concepts. Collaboration with audit teams is essential for successful go-lives.

Qualifications

• B.Tech/MBA/CA degree required.
• 3-5 years of SAP Security & GRC experience.
• Experience with SAP S/4HANA and Fiori security is preferred.

Responsibilities

• Design and maintain SAP security roles across ECC and S/4HANA.
• Configure SAP GRC Access Control (ARA, ARM, BRM, EAM) and SoD rules.
• Perform user/role provisioning and troubleshoot authorization issues (SU01, PFCG, SU53).
• Support security assessments, go-lives, audits, and remediation activities.
• Collaborate with business, audit, and compliance teams on access governance.

Skills

SAP Security

GRC

SoD controls

User provisioning

Fiori security

S/4HANA

Education

B.Tech

MBA

CA

Tools

SU01

PFCG

SU53

ST01

SUIM

SU24

Job description

Job Summary

The opportunity: Consultant-National-Business Consulting Risk-CNS - RISK - RISK MANAGEMENT - Bangalore

National comprises of sector agnostic teams working across industries for a well rounded experience.

Your key responsibilities

Technical Excellence

• Hands-on experience in SAP Security role design and maintenance, including creation and support of Single, Composite, Derived, and Fiori Catalog/Group roles across ECC and S/4HANA environments.
• Proficient in SAP GRC Access Control (ARA, ARM, BRM, EAM) configuration and administration, including SoD rule set maintenance, risk analysis, firefighter setup, and access request workflow management.
• Experienced in performing user and role provisioning, mass user administration, and troubleshooting authorization issues using transactions such as SU01, PFCG, SU53, ST01, SUIM, and SU24.
• Strong knowledge of Segregation of Duties (SoD) controls, mitigating controls, emergency access management, and periodic user/role reviews to support compliance and audit requirements.
• Exposure to SAP Fiori and S/4HANA authorization concepts, including business catalogs, spaces/pages, OData services, ICF activation, and Fiori launchpad security troubleshooting.
• Worked closely with business, audit, and compliance teams to support SAP security assessments, GRC implementations, go-lives, upgrade projects, and audit remediation activities while ensuring least-privileged access principles.

Skills and qualifications

To qualify for the role you must have

• B.Tech/MBA/CA

Experience

• SAP Security & GRC (3 to 5 years)

What we look for

People with the ability to work in a collaborative manner to provide services across multiple client departments while following the commercial and legal requirements. You will need a practical approach to solving issues and complex problems with the ability to deliver insightful and practical solutions. We look for people who are agile, curious, mindful, and able to sustain positive energy, while being adaptable and creative in their approach.