SAP GRC & Security Lead

Persistent Systems; Bengaluru; Hybrid; INR 2,500,000 - 4,000,000; Full time

Job summary

Persistent Systems is seeking an experienced SAP GRC & Security Lead to drive governance, risk, and compliance across SAP ECC, Fiori, BW, Ariba and REFX.

You will lead security architecture, access governance, and audit support, building robust SoD controls, role design, and provisioning workflows while collaborating with Finance, IT, Internal Audit and Compliance teams.

Qualifications

• Lead SAP GRC Access Control implementation and enhancements.
• Manage GRC modules: ARA, ARM, EAM, BRM.
• Perform SoD analysis, risk assessment, remediation.
• Oversee user access reviews and compliance assessments.
• Define and maintain SAP security governance and access controls.

Responsibilities

• Lead role redesign and authorization improvement initiatives.
• Manage user provisioning and access workflows.
• Coordinate audit evidence collection and remediation.
• Support SAP upgrades and transformation programs.
• Ensure compliance with SOX, ITGC, internal and external audits.
• Collaborate with cross-functional teams to align governance.

Skills

SAP GRC

Access Control

SoD Analysis

SOX Compliance

ITGC

User Administration

Role Design

Audit Support

Security Governance

Leadership

Stakeholder Management

Education

SAP GRC Certification

Bachelor's degree in IT/Computer Science

Tools

SAP GRC Access Control

SAP ECC Security

SAP Fiori Security

SAP BW Security

SAP Ariba Security

SAP REFX Security

CUA Environments

SAP S/4HANA Security

Job description

We are seeking an experienced SAP GRC & Security Lead with extensive expertise in SAP Security, Governance, Risk, and Compliance (GRC). The ideal candidate will be responsible for leading SAP access governance, security architecture, compliance controls, and audit support across multiple SAP applications including SAP ECC, REFX, Ariba, BW, and Fiori. This role requires strong leadership capabilities, security governance expertise, and deep knowledge of access management and compliance frameworks.

• Role: SAP GRC & Security Lead
• Experience: 8 to 12 Years
• Job Type: Full Time Employment

What You'll Do:

• Lead the implementation, enhancement, and support of SAP GRC Access Control solutions.
• Manage SAP GRC modules including Access Risk Analysis (ARA), Access Request Management (ARM), Emergency Access Management (EAM), Business Role Management (BRM).
• Perform Segregation of Duties (SoD) analysis, risk assessment, and remediation activities.
• Conduct periodic user access reviews and compliance assessments.
• Define, implement, and maintain SAP security governance frameworks and access control standards.
• Design, build, and maintain security roles, authorizations, and access controls across SAP applications.
• Lead role redesign, optimization, remediation, and authorization improvement initiatives.
• Manage user provisioning, deprovisioning, and access request workflows.
• Ensure compliance with corporate security standards, regulatory requirements, and audit controls.
• Support SAP upgrades, implementations, transformation programs, and compliance initiatives.
• Manage SAP Fiori security including catalogs, groups, launchpad roles, and authorization concepts.
• Support Fiori deployment activities, testing, and production rollout initiatives.
• Troubleshoot authorization issues and improve end-user security experience.
• Support SOX, ITGC, internal audits, and external audit engagements.
• Coordinate audit evidence collection, control testing, and remediation activities.
• Maintain risk and control matrices related to SAP business processes and security controls.
• Implement mitigating controls for critical access and SoD violations.
• Collaborate with Finance, Procurement, Real Estate, Internal Audit, Compliance, and IT teams to ensure governance alignment.

Expertise You'll Bring:

• 8-12 years of SAP experience with a minimum of 8 years in SAP Security and GRC.
• Strong expertise in SAP GRC Access Control 10.x / 12.x, SAP ECC Security, SAP Fiori Security, SAP BW Security, SAP Ariba Security, SAP REFX Security.
• Deep knowledge of Segregation of Duties (SoD) analysis and risk management.
• Experience implementing and managing SAP access governance frameworks.
• Strong understanding of SOX Compliance, IT General Controls (ITGC), Internal Audits, External Audits, Compliance Management.
• Expertise in SAP Role Design, Authorizations, and User Administration.
• Experience managing workflow-based access requests and approval processes.
• Strong knowledge of access review management and certification processes.
• Experience with security troubleshooting, authorization analysis, and governance reporting.
• Familiarity with CUA (Central User Administration) environments.
• Strong analytical, problem-solving, and risk assessment capabilities.
• Excellent communication, stakeholder management, and leadership skills.
• Experience working with global teams and enterprise-scale SAP environments.
• Ability to manage multiple priorities while maintaining compliance and security standards.
• Experience with Risk and Compliance Management frameworks.
• Knowledge of SAP Identity and Access Governance practices.
• Familiarity with SAP S/4HANA security concepts.
• Experience supporting SAP transformation and modernization projects.
• Exposure to automation of access governance and compliance reporting.
• Relevant SAP Security or SAP GRC certifications.
• Competitive salary and benefits package
• Culture focused on talent development with quarterly growth opportunities and company-sponsored higher education and certifications
• Opportunity to work with cutting-edge technologies
• Employee engagement initiatives such as project parties, flexible work hours, and Long Service awards
• Insurance coverage: group term life, personal accident, and Mediclaim hospitalization for self, spouse, two children, and parents

Values-Driven, People-Centric & Inclusive Work Environment:

Persistent is dedicated to fostering diversity and inclusion in the workplace. We invite applications from all qualified individuals, including those with disabilities, and regardless of gender or gender preference. We welcome diverse candidates from all backgrounds.

• We support hybrid work and flexible hours to fit diverse lifestyles.
• Our office is accessibility-friendly, with ergonomic setups and assistive technologies to support employees with physical disabilities.
• If you are a person with disabilities and have specific requirements, please inform us during the application process or at any time during your employment

Let's unleash your full potential at Persistent - persistent.com/careers

"Persistent is an Equal Opportunity Employer and prohibits discrimination and harassment of any kind."