SAP GRC Security Consultant (Contract-To-Hire)

Orcapod Consulting Services; Pune District; Hybrid; INR 1,200,000 - 1,800,000; Full time

Job summary

Orcapod Consulting Services in Pune seeks a SAP GRC Security Senior Consultant to own end-to-end SAP GRC Access Control in an AMS environment. The role covers configuration, operations, risk management, and audit-aligned security improvements.

Responsibilities include designing and maintaining GRC workflows, supporting role management across SAP ECC/S4HANA/Fiori, and ensuring compliance with SOX ITGC and client requirements.

Qualifications

• Experience with SAP GRC Access Control 10.x/12.x and ECC security.
• Proficient in SoD analysis and risk mitigation.
• Familiar with ITIL incident/change/problem management.
• Experience provisioning users and managing roles across SAP landscapes.

Responsibilities

• Configure and support SAP GRC Access Control modules (ARA/ARM/EAM/BRM).
• Design and maintain GRC workflows, mitigation controls, and approvals.
• Perform end-to-end SAP role design and maintenance across ECC/S4HANA/Fiori.
• Provide L2/L3 AMS support and follow ITSM lifecycle with ServiceNow.
• Support SOX ITGC compliance and audit readiness.
• Operate in AMS with SLA/KPI adherence and change control.

Skills

SAP GRC Access Control

SAP Security ECC

SoD analysis

Risk analysis

ITIL processes

ServiceNow

Access management

Incident handling

Role management

Audit/compliance

Education

SAP GRC Certification

Tools

ServiceNow

Job description

Job Description : GRC Security

Location- Pune

NP-Immediate-15 days

Role Summary - The SAP GRC Security Senior Consultant (B2) is responsible for end-to-end SAP Security and GRC Access Control support in an AMS environment. The role involves configuration, operations, risk management, and continuous improvement of SAP security landscapes while ensuring compliance with audit and business requirements.

Key Responsibilities

1. SAP GRC Access Control (Primary Responsibility) Configure and support SAP GRC Access Control 10.x / 12.x modules (ARA, ARM, EAM, BRM) Manage Access Risk Analysis (ARA), Emergency Access Management (EAM), and Access Request Management (ARM) Design and maintain GRC workflows, mitigation controls, and approval processes Build and maintain custom rulesets for SoD (Segregation of Duties) analysis

2. SAP Security & Role Management Perform end-to-end role design, creation, and maintenance (Single, Composite, Derived roles) Support user provisioning across SAP ECC, S/4HANA, Fiori, and other systems Manage user access requests, role assignments, and authorization issues Ensure roles are aligned with business processes (O2C, P2P, R2R)

3. AMS Support & ITIL Processes Provide L2/L3 support for incidents, service requests, and problem management Handle ticket lifecycle using ITSM tools (e.g., ServiceNow) Participate in change management, release deployment, and CAB activities Work in AMS support model with SLA/KPI adherence

4. Risk, Compliance & Audit Management Perform SoD analysis, risk identification, and mitigation planning Support internal/external audits by providing evidence and reports Ensure compliance with SOX ITGC and security policies Monitor Firefighter IDs (Emergency Access) usage and logs

5. GRC Configuration & Optimization Perform initial setup and configuration of GRC Access Control components Maintain rulesets, connectors, mitigation controls, and BRF+ workflows Optimize security processes and GRC performance

6. Stakeholder & Business Engagement Work closely with business users, auditors, and IT teams Understand business processes and translate into security roles and controls Proactively suggest service improvements and automation opportunities

7. Reporting & Documentation Generate reports on: Risk analysis, Mitigation controls, Firefighter usage, Maintain SOPs, security policies and documentation, Support RCA for security incidents

Required Skills

• Strong experience in SAP GRC Access Control and SAP Security ECC
• GRC Upgrade experience is mandatory
• Knowledge of SoD ruleset creation and risk analysis
• Experience in ITIL processes (Incident, Change, Problem Management)
• Hands-on with ticketing tools (ServiceNow or equivalent)
• Strong understanding of audit and compliance is mandatory
• Run: Incident handling, access requests, monitoring
• Maintain: Role updates, GRC config, compliance
• Improve: SoD optimization, automation, audit readiness

Experience & Qualification

• 58 years of experience in SAP Security / GRC roles
• Experience in AMS/support projects is mandatory
• SAP GRC/Security certification (preferred)

Behavioural Competencies

• Strong analytical and problem-solving skills
• Ability to handle critical incidents independently (B2 expectation)
• Strong stakeholder communication and client handling
• Proactive in identifying process improvements

Nice to Have

• Experience in S/4HANA implementations or upgrades
• Exposure to integration
• Knowledge of automation or security reporting tools