SAP GRC & Security Lead

Persistent; Bengaluru; Hybrid; INR 3,000,000 - 4,500,000; Full time

Benefits offered by this job

Competitive salary

Education sponsorship

Flexible hours

Health check-ups

Insurance coverage

Job summary

Persistent is seeking an experienced SAP GRC & Security Lead to drive governance, access controls, and security architecture across SAP EE, ECC, Fiori, Ariba, BW, and REFX. The role demands leadership across global teams, audit readiness, and ongoing SOX/ITGC compliance.

The candidate will define security standards, design roles, and oversee provisioning and remediation efforts. The position is based in Bengaluru/Hyderabad with hybrid work options, offering an opportunity to work with

Qualifications

• 8-12 years of SAP experience with a minimum of 8 years in SAP Security and GRC.
• Strong expertise in SAP GRC Access Control 10.x / 12.x, SAP ECC Security, SAP Fiori Security, SAP BW Security, SAP Ariba Security, SAP REFX Security.
• Deep knowledge of Segregation of Duties (SoD) analysis and risk management.
• Experience implementing and managing SAP access governance frameworks.
• Strong understanding of SOX Compliance, IT General Controls (ITGC), Internal Audits, External Audits, Compliance Management.
• Expertise in SAP Role Design, Authorizations, and User Administration.
• Experience managing workflow-based access requests and approval processes.
• Strong knowledge of access review management and certification processes.
• Experience with security troubleshooting, authorization analysis, and governance reporting.
• Familiarity with CUA (Central User Administration) environments.
• Strong analytical, problem-solving, and risk assessment capabilities.
• Excellent communication, stakeholder management, and leadership skills.
• Experience working with global teams and enterprise-scale SAP environments.
• Ability to manage multiple priorities while maintaining compliance and security standards.
• Experience with Risk and Compliance Management frameworks.
• Knowledge of SAP Identity and Access Governance practices.
• Familiarity with SAP S/4HANA security concepts.
• Experience supporting SAP transformation and modernization projects.
• Exposure to automation of access governance and compliance reporting.
• Relevant SAP Security or SAP GRC certifications.

Responsibilities

• Lead SAP GRC Access Control implementations and support.
• Manage SAP GRC modules including ARA, ARM, EAM, BRM.
• Perform SoD analysis, risk assessments, remediation.
• Conduct user access reviews and compliance assessments.
• Define, implement, and maintain SAP security governance frameworks and access control standards.
• Design, build, and maintain security roles, authorizations, and access controls across SAP applications.
• Lead role redesign, optimization, remediation, and authorization improvement initiatives.
• Manage user provisioning, deprovisioning, and access request workflows.
• Ensure compliance with corporate security standards, regulatory requirements, and audit controls.
• Support SAP upgrades, implementations, transformation programs, and compliance initiatives.
• Manage SAP Fiori security including catalogs, groups, launchpad roles, and authorization concepts.
• Support Fiori deployment activities, testing, and production rollout initiatives.
• Troubleshoot authorization issues and improve end-user security experience.
• Support SOX, ITGC, internal audits, and external audit engagements.
• Coordinate audit evidence collection, control testing, and remediation activities.
• Maintain risk and control matrices related to SAP business processes and security controls.
• Implement mitigating controls for critical access and SoD violations.
• Collaborate with Finance, Procurement, Real Estate, Internal Audit, Compliance, and IT teams to ensure governance alignment.

Skills

SAP GRC & Security

SoD analysis

Access governance

Security architecture

SOX ITGC

Stakeholder leadership

Tools

SAP GRC Access Control

CUA

Job description

About Position:

We are seeking an experienced SAP GRC & Security Lead with extensive expertise in SAP Security, Governance, Risk, and Compliance (GRC). The ideal candidate will be responsible for leading SAP access governance, security architecture, compliance controls, and audit support across multiple SAP applications including SAP ECC, REFX, Ariba, BW, and Fiori. This role requires strong leadership capabilities, security governance expertise, and deep knowledge of access management and compliance frameworks.

• Role: SAP GRC & Security Lead
• Location: Bengaluru & Hyderabad
• Experience: 8 to 12 Years
• Job Type: Full Time Employment

What You'll Do:

• Lead the implementation, enhancement, and support of SAP GRC Access Control solutions.
• Manage SAP GRC modules including Access Risk Analysis (ARA), Access Request Management (ARM), Emergency Access Management (EAM), Business Role Management (BRM).
• Perform Segregation of Duties (SoD) analysis, risk assessment, and remediation activities.
• Conduct periodic user access reviews and compliance assessments.
• Define, implement, and maintain SAP security governance frameworks and access control standards.
• Design, build, and maintain security roles, authorizations, and access controls across SAP applications.
• Lead role redesign, optimization, remediation, and authorization improvement initiatives.
• Manage user provisioning, deprovisioning, and access request workflows.
• Ensure compliance with corporate security standards, regulatory requirements, and audit controls.
• Support SAP upgrades, implementations, transformation programs, and compliance initiatives.
• Manage SAP Fiori security including catalogs, groups, launchpad roles, and authorization concepts.
• Support Fiori deployment activities, testing, and production rollout initiatives.
• Troubleshoot authorization issues and improve end-user security experience.
• Support SOX, ITGC, internal audits, and external audit engagements.
• Coordinate audit evidence collection, control testing, and remediation activities.
• Maintain risk and control matrices related to SAP business processes and security controls.
• Implement mitigating controls for critical access and SoD violations.
• Collaborate with Finance, Procurement, Real Estate, Internal Audit, Compliance, and IT teams to ensure governance alignment.

Expertise You'll Bring:

• 8-12 years of SAP experience with a minimum of 8 years in SAP Security and GRC.
• Strong expertise in SAP GRC Access Control 10.x / 12.x, SAP ECC Security, SAP Fiori Security, SAP BW Security, SAP Ariba Security, SAP REFX Security.
• Deep knowledge of Segregation of Duties (SoD) analysis and risk management.
• Experience implementing and managing SAP access governance frameworks.
• Strong understanding of SOX Compliance, IT General Controls (ITGC), Internal Audits, External Audits, Compliance Management.
• Expertise in SAP Role Design, Authorizations, and User Administration.
• Experience managing workflow-based access requests and approval processes.
• Strong knowledge of access review management and certification processes.
• Experience with security troubleshooting, authorization analysis, and governance reporting.
• Familiarity with CUA (Central User Administration) environments.
• Strong analytical, problem-solving, and risk assessment capabilities.
• Excellent communication, stakeholder management, and leadership skills.
• Experience working with global teams and enterprise-scale SAP environments.
• Ability to manage multiple priorities while maintaining compliance and security standards.
• Experience with Risk and Compliance Management frameworks.
• Knowledge of SAP Identity and Access Governance practices.
• Familiarity with SAP S/4HANA security concepts.
• Experience supporting SAP transformation and modernization projects.
• Exposure to automation of access governance and compliance reporting.
• Relevant SAP Security or SAP GRC certifications.

Benefits:

• Competitive salary and benefits package
• Culture focused on talent development with quarterly growth opportunities and company-sponsored higher education and certifications
• Opportunity to work with cutting-edge technologies
• Employee engagement initiatives such as project parties, flexible work hours, and Long Service awards
• Annual health check-ups
• Insurance coverage: group term life, personal accident, and Mediclaim hospitalization for self, spouse, two children, and parents

Values-Driven, People-Centric & Inclusive Work Environment:

Persistent is dedicated to fostering diversity and inclusion in the workplace. We invite applications from all qualified individuals, including those with disabilities, and regardless of gender or gender preference. We welcome diverse candidates from all backgrounds.

• We support hybrid work and flexible hours to fit diverse lifestyles.
• Our office is accessibility-friendly, with ergonomic setups and assistive technologies to support employees with physical disabilities.
• If you are a person with disabilities and have specific requirements, please inform us during the application process or at any time during your employment

"Persistent is an Equal Opportunity Employer and prohibits discrimination and harassment of any kind."