SAP Security Consultant

IBU; Telangana; On-site; INR 1,500,000 - 2,500,000; Full time

Job summary

IBU is seeking a Senior Consultant to lead SAP Application Security and GRC-related engagements. You will act as SME for SAP security, SoD frameworks, and GRC Access Control, guiding secure design and remediation across S/4HANA or ECC environments.

You will manage client engagements, design controls, and mentor junior consultants, with a focus on delivering secure, compliant SAP solutions in complex landscapes.

Qualifications

• 5 to 7 years of core, hands-on experience in SAP Security and SAP GRC 10.x / 12.x Access Control modules (ARA, ARM, EAM, BRM).
• Proven track record executing full-cycle SAP S/4HANA and/or ECC security design, authorization architecture, and role maintenance via PFCG and SU24.
• Deep SoD frameworks knowledge, risk analysis, and compensating control design.
• Troubleshooting authorization issues using standard tools (SU53, ST01, STAUTHTRACE).
• Strong project management, analytical, and client-facing communication skills.

Responsibilities

• Serve as SME in SAP Application Security, authorizations, and GRC Access Control.
• Lead full lifecycle SAP S/4HANA/ECC security assessments, role design, implementation, and remediation.
• Identify and mitigate SoD conflicts across client landscapes.
• Design and test SAP security controls (automated and manual).
• Lead client workstreams, engagement planning, delivery, and QA.
• Drive service improvements through technical reviews with leadership.
• Contribute to practice initiatives, proposals, and mentorship of juniors.

Skills

SAP Security

GRC Access Control

SoD Analysis

PFCG & SU24

Client-facing

Project management

Education

Bachelor's degree in Computer Science/IT

Tools

SU53

ST01

STAUTHTRACE

Job description

Position: Senior Consultant - SAP Application Security & GRC

Experience: 4 to 18 Years

Employment Type: Full-time Contract

About the Role:

As a Senior Consultant, you will support client engagements focused on enterprise Cyber risk, specifically addressing Application Security concerns and navigating security transformation journeys across the SAP ecosystem. You will serve as a subject matter expert in SAP Application Security and GRC Access Control, collaborating with cross-functional technical teams and client stakeholders.

Key Responsibilities:

• - Serve as a Subject Matter Expert (SME) in multiple domains of SAP Application Security, authorizations, and GRC Access Control.
• - Lead and execute full lifecycle SAP S/4HANA or ECC security assessments, role design, implementation, and remediation exercises.
• - Identify, manage, and mitigate potential access risks and Segregation of Duties (SoD) conflicts across complex client landscapes.
• - Design, implement, and test SAP automated, manual, and application security controls.
• - Play a lead role on client workstreams, including engagement planning, delivery management, and quality assurance.
• - Drive continuous service improvement through regular technical reviews with internal and client leadership.
• - Contribute to practice-level initiatives, proposal development (RFP support), and mentorship of junior consultants.

Mandatory Requirements:

• - 5 to 7 years of core, hands-on experience in SAP Security and SAP GRC 10.x / 12.x Access Control modules (ARA, ARM, EAM, BRM).
• - Proven track record executing full-cycle SAP S/4HANA and/or ECC security design, authorization architecture, and role maintenance via PFCG and SU24.
• - Deep technical and functional understanding of Segregation of Duties (SoD) frameworks, risk analysis, and compensating control design.
• - Practical experience troubleshooting authorization issues using standard diagnostic tools (SU53, ST01, STAUTHTRACE).
• - Strong project management, analytical, and structured client-facing communication skills.

Preferred Qualifications:

• - Hands-on security experience with SAP Fiori (business catalogs, target mapping, OData services, S_SERVICE, S_START).
• - Exposure to multi-module security designs such as SAP BI, BW, SRM, CRM, SCM, MDG, or HR (structural authorizations).
• - Familiarity with Internal Controls over Financial Reporting (ICFR), BPRC, or SOX ITGC audit procedures.
• - Awareness of SAP Cloud extensions, SAP BTP security concepts, or SAP Analytics Cloud (SAC).
• - Professional certifications: CISA, CISM, or CISSP.
• - Prior experience within Big 4 or top-tier management consulting environments.