SAP S/4HANA Security Consultant (Security Weaver / Pathlock) - REMOTE

ADV TECHMINDS PVT LTD; Hyderabad; On-site; INR 2,400,000 - 4,200,000; Full time

Job summary

ADV TECHMINDS PVT LTD is seeking an senior SAP S/4HANA Security Consultant to lead the security workstream for brownfield migration. You will own security impact analysis, role redesign, and implement Fiori/SICF and OData security, leveraging Pathlock/Security Weaver as primary governance tools.

The role requires hands-on SU25 execution, SoD risk management, and collaboration with FI/CO/MM/EWM teams, with strong communication skills.

Qualifications

• Minimum 2–3 full lifecycle ECC S/4HANA brownfield migration projects (hands‑on conversion experience).
• Direct, hands‑on execution of SU25 (Phases 1–4) and role retrofit activities during conversion.
• Fiori security implementation experience: catalogs, groups, business roles, OData activation, SICF.
• Enterprise role redesign and remediation at scale (analysis and remediation of 1,000+ roles preferred).
• SAP Readiness Check and Simplification Item Catalog impact analysis experience.
• Hands‑on experience with Security Weaver (Pathlock) OR SAP GRC Access Control for SoD analysis, simulation, remediation, and reporting.

Responsibilities

• Lead SAP security strategy and execution for ECC S/4HANA transformation (brownfield conversion).
• Perform role impact analysis, cleanup, and remediation; execute SU25 conversion steps and validate role behavior in S/4.
• Design and implement a Fiori-first security model (catalogs, groups, business roles) and secure OData/SICF services.
• Configure and manage Security Weaver (Pathlock) controls; alternatively, align SAP GRC rule sets where applicable.
• Migrate SoD rule sets and control frameworks from ECC to S/4; define interim compensating controls.
• Conduct workshops with functional teams (FI/CO/MM/SD/EWM), Basis, Development, and Audit to validate security models.
• Support cutover, security testing, and post‑go‑live authorization validation and stabilization.

Skills

SAP S/4HANA security

Fiori security

SU25

SoD analysis

Security Weaver/Pathlock

GRC/Access Control

OData/SICF

Role redesign

Tools

Security Weaver (Pathlock)

SAP GRC Access Control

Job description

SAP S/4HANA Security Consultant

(Security Weaver / Pathlock)

Engagement Details

Role: SAP S/4HANA Security Consultant (Security Weaver / Pathlock)

Work Timings: 4:30 PM to 1:30 AM

Project Background

We are seeking a senior SAP S/4HANA Security Consultant to work on the security workstream for our brownfield migration.

This person will own security impact analysis, role redesign, Fiori and HANA security implementation, and SoD/risk management using Security Weaver (Pathlock) as the primary governance tool. Experience with SAP GRC Access Control is also acceptable where Security Weaver exposure is limited.

Core Requirements (Must)

• Minimum 2–3 full lifecycle ECC S/4HANA brownfield migration projects (hands‑on conversion experience).
• Direct, hands‑on execution of SU25 (Phases 1–4) and role retrofit activities during conversion.
• Fiori security implementation experience: catalogs, groups, business roles, OData activation, SICF.
• Enterprise role redesign and remediation at scale (analysis and remediation of 1,000+ roles preferred).
• SAP Readiness Check and Simplification Item Catalog impact analysis experience.
• Hands‑on experience with Security Weaver (Pathlock) OR SAP GRC Access Control for SoD analysis, simulation, remediation, and reporting.
• Strong understanding of SoD rule design and risk mitigation strategy during ECC S/4 transitions.
• Excellent communication skills.

Key Responsibilities

• Lead SAP security strategy and execution for ECC S/4HANA transformation (brownfield conversion).
• Perform role impact analysis, cleanup, and remediation; execute SU25 conversion steps and validate role behavior in S/4.
• Design and implement a Fiori-first security model (catalogs, groups, business roles) and secure OData/SICF services.
• Configure and manage Security Weaver (Pathlock) controls; alternatively, align SAP GRC rule sets where applicable.
• Migrate SoD rule sets and control frameworks from ECC to S/4; define interim compensating controls.
• Conduct workshops with functional teams (FI/CO/MM/SD/EWM), Basis, Development, and Audit to validate security models.
• Support cutover, security testing, and post‑go‑live authorization validation and stabilization.

Preferred Qualifications

• 8+ years of SAP Security experience (ECC and S/4HANA).
• Proven track record in 2+ ECC S/4HANA brownfield conversions.

Experience With Security Weaver (Pathlock) Strongly Preferred.

• SAP GRC Access Control experience in complex enterprise environments.
• Experience working in SOX/ITGC‑regulated environments and preparing audit evidence.
• Excellent communication skills and ability to lead cross‑functional workshops.