SAP GRC and Security Consultant

Tata Consultancy Services; Hyderabad, Bengaluru; On-site; INR 900,000 - 1,300,000; Full time

Job summary

Tata Consultancy Services in Hyderabad is seeking SAP Security and GRC experts to design, build, and maintain SAP security roles across ECC, S/4HANA, and Fiori. You will handle user administration, authorization troubleshooting, and access provisioning, while analyzing authorization issues with SU53, ST01, and SUIM.

Additionally, you will configure and support ARA, ARM, BRM, and EAM/ Firefighter, design SoD rule sets, and ensure audit-ready documentation and remediation plans across SAP

Qualifications

• Experience designing, building and maintaining SAP security roles (Single, Composite, Derived).
• Experience configuring SAP GRC Access Control modules (ARA, ARM, BRM, EAM/Firefighter).
• Knowledge of SOX/ITGC compliance and audit readiness.

Responsibilities

• Design, build, and maintain SAP security roles across ECC, S/4HANA, and Fiori.
• Perform user administration, authorization troubleshooting, and access provisioning.
• Analyze authorization issues using SU53, ST01, SUIM, and authorization trace tools.
• Manage SAP security across landscapes and support role transports and migrations.

Skills

SAP Security

GRC

Access governance

Tools

SU53

ST01

SUIM

Job description

Role & responsibilities

SAP Security

• Design, build, and maintain SAP security roles (Single, Composite, and Derived Roles).
• Perform user administration, authorization troubleshooting, and access provisioning.
• Analyze authorization issues using SU53, ST01, SUIM, and authorization trace tools.
• Manage SAP security across ECC, S/4HANA, Fiori, and other SAP applications.
• Support role transport and migration activities across landscapes. [Nithin_GRC | Word], [Madhuri J SAP GRC CV | Word]

SAP GRC Access Control

• Configure and support:
  • Access Risk Analysis (ARA)
  • Access Request Management (ARM)
  • Business Role Management (BRM)
  • Emergency Access Management (EAM / Firefighter)
• Design and maintain Segregation of Duties (SoD) rule sets and risk libraries.
• Configure mitigation controls, monitors, and compliance workflows.
• Perform user, role, and profile-level risk analysis.
• Manage User Access Reviews (UAR) and audit compliance activities.
• Configure MSMP workflows, approval processes, notifications, and escalation rules
• Support SOX, ITGC, and internal audit compliance requirements.
• Conduct periodic access certification and compliance reviews.
• Prepare audit documentation and remediation plans.
• Drive risk mitigation and access governance initiatives across SAP environments