SAP GRC Access Control Consultant

NTT DATA, Inc.; Bengaluru Urban; On-site; INR 1,500,000 - 2,500,000; Full time

Job summary

NTT DATA seeks a hands-on SAP GRC Access Control Consultant to join our Bangalore team. The role focuses on configuring SAP GRC modules, managing ARM/ARA/EAM/BRM, and ensuring secure, auditable access governance across SAP and related apps.

You will support risk remediation, SoD analyses, and EAM operations while coordinating with auditors and stakeholders. Hybrid/onsite work in Bangalore may be required.

Qualifications

• 4-6 years of SAP Security and/or SAP GRC experience.
• Minimum 3 years of hands-on SAP GRC Access Control experience.
• Hands-on expertise in MSMP workflow configuration and BRF+ rules.

Responsibilities

• Configure and support SAP GRC Access Control (10.1/12.0) across ARM, ARA, EAM, BRM.
• Troubleshoot MSMP workflows, BRF+ rules, and approvals/notifications.
• Perform SoD and sensitive-access risk analysis across user, role, and request levels.
• Support risk remediation, compliance monitoring, and audit activities.
• Administer Emergency Access Management including Firefighter IDs and logs.
• Collaborate with business users, auditors, and IT teams.

Skills

SAP GRC Access Control

ARM

ARA

EAM

BRM

BRF+

SoD

Role design

User administration

Authorization objects

SU24

S/4HANA security

Fiori security

SailPoint integration

IAG

Tools

MSMP

BRF+ rules

Job description

India T&M Special Bonus:

Req ID: 390263

NTT DATA strives to hire exceptional, innovative and passionate individuals who want to grow with us.

We are currently seeking a SAP GRC Access Control Consultant to join our team in Bangalore, Karnātaka (IN-KA), India (IN).

SAP GRC Access Control Consultant

Role Summary

We are looking for a hands-on SAP GRC Access Control Consultant to support, enhance, and operate enterprise access governance solutions. The role will focus on configuring and supporting SAP GRC Access Control modules, ensuring secure, compliant, and auditable access management processes across SAP and integrated applications.

Key Responsibilities

• Configure and support SAP GRC Access Control (10.1/12.0) across:
  • Access Request Management (ARM)
  • Access Risk Analysis (ARA)
  • Emergency Access Management (EAM)
  • Business Role Management (BRM)
• Configure and troubleshoot MSMP workflows, BRF+ rules, agent determination, approvals, notifications, and escalations.
• Perform Segregation of Duties (SoD) and sensitive-access risk analysis at user, role, profile, and request levels.
• Support risk remediation, mitigating controls, compliance monitoring, and audit activities.
• Administer Emergency Access Management, including Firefighter IDs, workflows, and log reviews.
• Support business role lifecycle management, including creation, approval, maintenance, and reconciliation.
• Monitor connectors, provisioning jobs, repository synchronization, and background processes.
• Investigate incidents, perform root‑cause analysis, and implement sustainable resolutions.
• Support SAP ECC, S/4HANA, and Fiori access governance requirements.
• Manage transport deployments and coordinate changes across environments.
• Prepare operational reports, audit evidence, SOPs, runbooks, and configuration documentation.
• Drive continuous improvement and automation initiatives within access governance processes.
• Collaborate effectively with business users, auditors, compliance teams, and technical stakeholders.

Required Skills & Experience

• 4-6 years of overall SAP Security and/or SAP GRC experience.
• Minimum 3 years of hands‑on SAP GRC Access Control experience.
• Strong experience in at least three of the following modules:
• ARM
• ARA
• EAM
• BRM
• Hands‑on expertise in MSMP workflow configuration and BRF+ rules.
• Strong understanding of:
• Segregation of Duties (SoD)
• Sensitive Access Management
• Risk Analysis and Mitigation Controls
• Access Governance Processes
• Working knowledge of SAP Security concepts, including:
• Role Design
• User Administration
• Authorization Objects
• SU24
• Security Troubleshooting
• Experience supporting SAP ECC and/or S/4HANA environments.
• Ability to analyze production issues, document root causes, and coordinate fixes across teams.
• Understanding of ITGCs, audit requirements, change control, and production support processes.
• Strong stakeholder management, communication, and documentation skills.

Preferred Skills

• SAP Fiori Security.
• SAP Identity Access Governance (IAG).
• SailPoint integration.
• SAP SuccessFactors or non‑SAP application integrations.
• SAP CPI, APIs, or OData services.
• Knowledge of SAP Process Control.

Core Competencies

• Access Request Management (ARM)
• Access Risk Analysis (ARA)
• Emergency Access Management (EAM)
• Business Role Management (BRM)
• Segregation of Duties (SoD) Analysis
• Mitigating Controls & Compliance
• Access Provisioning Governance
• MSMP & BRF+ Configuration
• SAP Security & Authorization Concepts
• S/4HANA & Fiori Security
• Transport & Defect Management

About NTT DATA

NTT DATA is a $30 billion business and technology services leader, serving 75% of the Fortune Global 100. We are committed to accelerating client success and positively impacting society through responsible innovation. We are one of the world's leading AI and digital infrastructure providers, with unmatched capabilities in enterprise‑scale AI, cloud, security, connectivity, data centers and application services. our consulting and Industry solutions help organizations and society move confidently and sustainably into the digital future. As a Global Top Employer, we have experts in more than 50 countries. We also offer clients access to a robust ecosystem of innovation centers as well as established and start‑up partners. NTT DATA is a part of NTT Group, which invests over $3 billion each year in R&D.

Whenever possible, we hire locally to NTT DATA offices or client sites. This ensures we can provide timely and effective support tailored to each client’s needs. While many positions offer remote or hybrid work options, these arrangements are subject to change based on client requirements. For employees near an NTT DATA office or client site, in‑office attendance may be required for meetings or events, depending on business needs. At NTT DATA, we are committed to staying flexible and meeting the evolving needs of both our clients and employees. NTT DATA recruiters will never ask for payment or banking information and will only use @nttdata.com, @nttdatafed.com and @talent.nttdataservices.com email addresses. If you are requested to provide payment or disclose banking information, please submit a contact us form, https://us.nttdata.com/en/contact-us.

NTT DATA endeavors to make https://us.nttdata.com accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact us at https://us.nttdata.com/en/contact-us.

This contact information is for accommodation requests only and cannot be used to inquire about the status of applications. NTT DATA is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status. For our EEO Policy Statement, please click here. If you'd like more information on your EEO rights under the law, please click here. For Pay Transparency information, please click here.