Sap Security

GyanSys Inc.; Bengaluru; On-site; INR 2,500,000 - 4,000,000; Full time

Job summary

GyanSys Inc. seeks an experienced SAP Security & Access Governance Consultant to join our Global IT team in Bengaluru. You will manage SAP user administration, role design with PFCG, and maintain access governance and security compliance across the SAP landscape.

The role requires strong SoD and GRC understanding, plus experience supporting IAM, SSO, and audit activities across SAP ECC/S/4HANA environments.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, Information Systems, or related field.
• 5+ years of experience in SAP Security, User Administration, and Role Management.
• Strong hands-on experience with SAP authorization concepts, profiles, roles, and authorization objects.
• Proven experience with SAP PFCG for role design, maintenance, and provisioning.
• Experience with SAP user administration (SU01) and related security transactions.
• GRC concepts including SoD, critical access management, and access governance.

Responsibilities

• Design, create, maintain, and optimize SAP roles using PFCG to meet business requirements and security standards.
• Perform SAP user administration activities including user creation, modification, deactivation, lock/unlock, and access maintenance (SU01).
• Develop and maintain single, composite, and derived roles with SAP authorization best practices.
• Review role designs and access requests to identify SoD conflicts and access risks.
• Embed governance and compliance controls during role creation and user provisioning without SAP GRC tools.
• Analyze critical SAP transaction codes/authorization objects for proper access controls.
• Support access reviews, user recertification, and audit activities.
• Manage user provisioning and deprovisioning across the lifecycle.

Skills

SAP Security

User Administration

PFCG

SU01

SoD

IAM

SSO

GRC concepts

Auditing support

Stakeholder management

Education

Bachelor's degree

Tools

SAP ECC

SAP S/4HANA

Job description

We are seeking an experienced SAP Security & Access Governance Consultant to join our Global IT team. In this role, you will be responsible for SAP user administration, role design, access governance, and security compliance across the SAP landscape. As a subject matter expert in SAP Security, you will ensure access management processes adhere to governance and compliance requirements while supporting business operations through secure and efficient role provisioning.

While Putzmeister currently does not utilize the SAP GRC toolset, the successful candidate must possess a strong functional understanding of Governance, Risk, and Compliance (GRC) principles, including Segregation of Duties (SoD), critical access management, and authorization risk mitigation, and be able to embed these controls into SAP security processes and role designs.

Number of Positions: 1 (One)

Key Responsibilities

• Design, create, maintain, and optimize SAP roles using PFCG in alignment with business requirements and security standards.
• Perform SAP user administration activities including user creation, modification, deactivation, lock/unlock, and access maintenance using SU01.
• Develop and maintain single, composite, and derived roles while ensuring compliance with SAP authorization best practices.
• Review role designs and access requests to identify potential Segregation of Duties (SoD) conflicts and access risks.
• Apply governance and compliance controls during role creation and user provisioning processes without reliance on SAP GRC tools.
• Analyze critical SAP transaction codes and authorization objects to ensure appropriate access controls are implemented.
• Support periodic access reviews, user recertification exercises, and audit activities.
• Manage user provisioning and deprovisioning activities throughout the user lifecycle.
• Collaborate with business stakeholders to define role concepts and access models that balance operational efficiency with security requirements.
• Support Single Sign-On (SSO), authentication, and Identity & Access Management (IAM) related initiatives.
• Troubleshoot authorization-related issues and provide timely resolution for business-critical incidents.
• Develop and maintain security documentation, role design standards, access governance procedures, and operational guidelines.

Requirements

• Bachelor’s degree in Computer Science, Information Technology, Information Systems, or a related field.
• 5+ years of experience in SAP Security, User Administration, and Role Management.
• Strong hands-on experience with SAP authorization concepts, profiles, roles, and authorization objects.
• Proven experience working with SAP PFCG for role design, role maintenance, and role provisioning.
• Strong experience with SAP user administration (SU01) and related security transactions.
• Good functional understanding of Governance, Risk & Compliance (GRC) concepts, including:
• Segregation of Duties (SoD)
• Critical Access Management
• Access Governance
• Security Compliance Controls
• Ability to identify and mitigate access risks during role design and user provisioning activities.
• Knowledge of critical SAP transaction codes and associated authorization risks.
• Experience designing and supporting single, composite, and derived roles in SAP ECC and/or SAP S/4HANA environments.
• Understanding of Identity & Access Management (IAM) concepts, user lifecycle management, and access provisioning processes.
• Experience supporting Single Sign-On (SSO) and authentication mechanisms.
• Experience supporting internal and external audits and responding to compliance-related requirements.
• Strong analytical and troubleshooting skills with the ability to resolve complex authorization issues.
• Excellent communication and stakeholder management skills with the ability to collaborate effectively with business and IT teams.
• Ability to work independently while supporting global teams across multiple time zones.
• Willingness to provide support during planned system changes, audits, and critical business requirements when necessary.