SAP GRC Lead Consultant

Allstate Corporation; Bengaluru; On-site; INR 1,500,000 - 2,200,000; Full time

Job summary

Allstate India, Bengaluru, seeks an experienced SAP S/4HANA Security & GRC Consultant to partner with global teams to drive secure, scalable SAP solutions. You will work across SAP GRC AC, Fiori, SoD, S/4HANA Security, and HANA DB Security with hands-on end-to-end implementations and audits.

You will collaborate with functional, technical, and compliance teams to remediate risks and enhance the overall SAP security posture supporting enterprise‑wide digital transformation initiatives.

Qualifications

• End-to-End GRC implementations (minimum 2 full life cycles).
• Activate BC Sets, IMG nodes, and SICF services for AC, PC, RM.
• Configure connectors, connector groups, EUPs, MSMP workflows, and BRF+ rules.
• Design and maintain Fiori rulesets for GRC–Fiori integration.

Responsibilities

• Lead SoD risk management, ITGC & Audit activities.
• Support SoD cleanup, remediation, and role redesign initiatives.
• Review GRC configuration, ruleset coverage, and mitigation controls.
• Collaborate with global teams to design secure SAP solutions.

Skills

GRC Access Control

Fiori

SoD

S/4HANA Security

HANA DB Security

Audit readiness

Global collaboration

Tools

SAP GRC Access Control

Fiori Security

BRF+ rules

SICF services

Job description

At Allstate, great things happen when our people work together to protect families and their belongings from life’s uncertainties. And for more than 90 years, our innovative drive has kept us a step ahead of our customers’ evolving needs. From advocating for seat belts, air bags and graduated driving laws, to being an industry leader in pricing sophistication, telematics, and, more recently, device and identity protection. Job Description Allstate India is looking for an experienced SAP S/4HANA Security & GRC Consultant who can partner with our global teams to drive secure, scalable, and compliant SAP solutions. The ideal candidate brings strong expertise across SAP GRC Access Control, Fiori, SoD, S/4HANA Security, and HANA Database Security with hands‑on experience in end‑to‑end implementations and auditing. You will collaborate closely with functional, technical, and compliance teams to design solutions, remediate risks, and enhance the overall SAP security posture supporting enterprise‑wide digital transformation initiatives.

SAP GRC Access Control

• End-to-End GRC implementations (minimum 2 full life cycles)
• Activate BC Sets, IMG nodes, and SICF services for AC, PC, RM
• Configure connectors, connector groups, EUPs, MSMP workflows, and BRF+ rules
• Develop initiator/agent/routing rules, mitigation controls, and customized risk/function IDs
• Design and maintain Fiori rulesets for GRC–Fiori integration
• Configure integration scenarios (SUPMG, AUTH, ROLEMG, PROV)
• Manage synchronization jobs, password self‑service, and role methodology
• Integrate GRC with HANA DB for provisioning and risk analysis
• SoD Risk Management, ITGC & Audit
• Design and build SoD risk rulesets including Fiori and HANA‑specific rulesets
• Support SoD cleanup, remediation, and role redesign initiatives
• Review GRC configuration, ruleset coverage, and mitigation controls
• Support RACM design/review and audit readiness for SAP landscapes

SAP Fiori Security Design Spaces & Pages aligned to business roles

• Activate OData services, SICF nodes, and semantic objects
• Maintain target mappings for custom apps
• Troubleshoot Fiori issues across logs (IWFND/IWBEP, browser console)
• Support Fiori App Support framework for faster issue resolution
• Lead migrations from distributed to embedded Fiori architectures
• Redesign Fiori landscapes replacing Groups with Spaces/Pages

S/4HANA, ECC, BI/BW & HR Security

• Manage table access using SE54 and map authorization groups
• Execute SU24, SU25 activities and maintain system security policies
• Restrict program access using RSCSAUTH, S_PROGRAM/S_PROGNAM
• Create and maintain BW Analysis Authorizations
• Perform CUA administration
• Drive ECC → S/4HANA migration security tasks
• Support compliance audits for ERP and S/4HANA
• Execute mass-security activities via SECATT, LSMW, GUI scripting
• Configure S/4HANA UI Masking & Logging for GDPR compliance

SAP HANA DB Security

• Create and maintain SQL, Analytic, Package, System & Application privileges
• Restrict access to DB objects (schemas, views, tables, procedures)
• Manage users (standard & restricted) and security parameters
• Work with HANA views (Analytic, Attribute, Calculation)
• Create and transport HANA packages using Delivery Units

Good to Have

• Understanding of SAP functional processes and business flows
• Experience in SAP SaaS solutions like IAS/IPS, Ariba and Fieldglass security
• Experience designing GRC/IAG risk rulesets for cloud/Fiori applications

What You’ll Bring

• Strong communication, analytical and problem‑solving skills
• Ability to work in a global, agile environment
• Passion for secure design and continuous improvement

Primary Skills

• Defect Resolution, ERP Applications, Functional Designs, Integration Testing, Issue Management
• SAP Governance Risk & Compliance Access Control (SAP GRC AC) (Inactive)
• SAP Governance Risk and Compliance (SAP GRC)

Shift Time Shift B (India)

About Allstate Joining our team isn’t just a job — it’s an opportunity. One that takes your skills and pushes them to the next level. One that encourages you to challenge the status quo. One where you can shape the future of protection while supporting causes that mean the most to you. Joining our team means being part of something bigger – a winning team making a meaningful impact.

The Allstate Corporation is one of the largest publicly held insurance providers in the United States. Ranked No. 84 in the 2023 Fortune 500 list of the largest United States corporations by total revenue, The Allstate Corporation owns and operates 18 companies in the United States, Canada, Northern Ireland, and India. Allstate India Private Limited, also known as Allstate India, is a subsidiary of The Allstate Corporation. The India talent center was set up in 2012 and operates under the corporation's Good Hands promise. As it innovates operations and technology, Allstate India has evolved beyond its technology functions to be the critical strategic business services arm of the corporation. With offices in Bengaluru and Pune, the company offers expertise to the parent organization’s business areas including technology and innovation, accounting and imaging services, policy administration, transformation solution design and support services, transformation of property liability service design, global operations and integration, and training and transition. Learn more about Allstate India here.

At Allstate, we work hard to help people live a good life every day. Allstaters are dedicated to serving clients, customers, and communities, which allows employees to find meaning and value in their work. Allstate offers an environment that fosters innovative thinking where you’ll be able to explore your ideas and feel proud of the work you do. Allstate helps protect nearly 16 million households with auto, home, life, and retirement products. We want every professional connected to Allstate to be committed to giving our customers the best and that means finding the best talent. We want you to be our next great addition.