SAP COE Senior Security -GRC Admin

Fresenius Medical Care

Bengaluru

On-site

INR 1,800,000 - 2,800,000

Full time

14 days+

Application generator

An application made for this job — a tailored resume and cover letter that speak straight to the posting.

Get past ATS filters

Job summary

Fresenius Medical Care in Bengaluru is seeking an SAP S/4HANA Security & GRC Administrator to oversee secure access management across the SAP landscape, ensuring compliance and continuity. You will manage roles, SoD controls, and GRC processes, collaborate with IT and business stakeholders, and drive automation and continuous improvement in security operations to support steady-state performance.

Join a global team focused on risk-based access governance, audits readiness, and cloud identity

Qualifications

Manage end-to-end SAP security and access governance.
Ensure SOX/GDPR compliance and audit readiness.
Coordinate with IT and business for role and authorization design.

Responsibilities

Manage end-to-end user lifecycle across S/4HANA and connected systems.
Design, maintain, and optimize SAP roles and authorization concepts.
Administer SAP GRC Access Control (AC) including ARA, Firefighter, ARM.
Configure and maintain SAP IAG for cloud and hybrid access governance.
Provide L3/L4 support for SAP security incidents and SoD issues.
Participate in change, release and automation initiatives.

Skills

SAP Security

GRC

SoD controls

Access governance

Cloud Identity

Incident management

Education

Bachelor's degree in Computer Science or related field

Tools

SAP GRC Access Control

SAP Cloud Identity Access Governance

Job description

The SAP S/4HANA Security & GRC Administrator is responsible for ensuring secure, compliant, and efficient access management across the SAP S/4HANA landscape within a sustain operations environment. The role manages user access, roles, authorizations, and Segregation of Duties (SoD) controls while maintaining compliance with internal policies, audit requirements, and regulatory standards through platforms such such as SAP GRC Access Control and SAP Cloud Identity Access Governance. Acting as a subject matter expert for SAP Security and access governance, the position supports steady-state operations, change and release management, and continuous improvement initiatives to ensure business continuity and strong control effectiveness.

Goal of function:

Tasks*

1. SAP Security Administration (S/4HANA Sustain)

Manage end-to-end user lifecycle: provisioning, modification, and deprovisioning across S/4HANA and connected systems.
Design, maintain, and optimize SAP roles and authorization concepts aligned with business processes and segregation of duties (SoD) principles.
Perform role remediation and authorization troubleshooting for business users and support teams.
Support transports related to security roles and authorization objects across environments (DEV, QA, PRD).
Ensure security configuration stability and support during patching, upgrades, and release cycles.

2. SAP GRC & Compliance Management

Administer SAP GRC Access Control (AC), including:
Access Risk Analysis (ARA)
Emergency Access Management (Firefighter)
Access Request Management (ARM)
Monitor and manage SoD conflicts and mitigation controls.
Support internal and external audits by providing access reports, evidence, and remediation plans.
Maintain compliance with SOX, GDPR, and internal IT controls.

3. SAP IAG (Cloud Identity Access Governance)

Configure and maintain IAG for cloud and hybrid access governance.
Integrate IAG with S/4HANA, Ariba, IBP, SAC, and BTP.
Maintain cloud SoD rulesets and risk libraries.
Automate cloud access provisioning workflows and approvals.

4. Operational Support & Incident Management

Act as L3/L4 support for SAP Security and GRC-related incidents and problems.
Investigate security-related issues and access failures impacting business processes.
Perform root cause analysis and implement preventive controls.
Participate in on-call or hyper care support as required during critical periods.

5. Change, Release & Continuous Improvement

Participate in release management cycles to ensure security readiness for new functionality.
Review functional changes for security and SoD impact.
Propose and implement automation and simplification of access processes where possible.
Maintain security documentation, role catalogues, and operating procedures.

6. Stakeholder & Vendor Collaboration

Work closely with Functional Leads, Basis, Infrastructure, and Compliance teams.
Coordinate with external partners (e.g., Accenture or AMS vendors) for aligned security operations.
Act as trusted advisor on SAP Security and GRC topics for business and IT stakeholders.

2) Stakeholder Engagement

Work closely with Functional Leads, Basis, Infrastructure, and Compliance teams.
Coordinate with external partners (e.g., Accenture or AMS vendors) for aligned security operations.
Act as trusted advisor on SAP Security and GRC topics for business and IT stakeholders.

3) Miscellaneous tasks:

As and when needed

Organization*

The function incumbent reports to:

Organizational unit:

GBS-ITS Integration lead

GBS ITS

Important internal interfaces:

Important external interfaces:

Please list cooperation with important departments, sites, subsidiaries etc.SAP COE workstreams