SAP Security & GRC

Deloitte Shared Services India; Bengaluru; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Deloitte Shared Services India in Bengaluru seeks an experienced SAP Security & GRC AC professional to manage access controls and risk mitigation. You will configure ARA, EAM, BRM, perform SoD analysis, conduct UAR, and support audits for SOX and data privacy.

Design, build, and test security roles across SAP environments such as S/4HANA and Fiori, ensuring compliant IT controls and secure access management.

Qualifications

• 6–11 years of SAP Security & GRC experience.
• Experience configuring ARA, EAM/Firefighting, BRM.
• Familiarity with SOX and data privacy IT controls.

Responsibilities

• Configure GRC modules like Access Risk Analysis (ARA), Emergency Access Management (EAM/Firefighting), and Business Role Management (BRM).
• Perform SoD analysis and manage the mitigation process to stop users from having conflicting permissions.
• Process access requests, manage workflows, and conduct routine user access reviews (UAR).
• Support internal and external audits by ensuring IT controls meet regulations like SOX and data privacy laws.
• Design, build, and test security roles across various SAP environments (e.g., S/4HANA, Fiori).

Skills

Access Control

Risk Mitigation

User Management

Audit & Compliance

Security Design

Tools

Access Risk Analysis (ARA)

Emergency Access Management (EAM)

Business Role Management (BRM)

Job description

SAP Security & GRC AC

Location: Bengaluru

Experience range- 6 to 11years

Core Responsibilities

• Access Control: Configure GRC modules like Access Risk Analysis (ARA), Emergency Access Management (EAM/Firefighting), and Business Role Management (BRM).
• Risk Mitigation: Perform SoD analysis and manage the mitigation process to stop users from having conflicting permissions.
• User Management: Process access requests, manage workflows, and conduct routine user access reviews (UAR).
• Audit & Compliance: Support internal and external audits by ensuring IT controls meet regulations like SOX and data privacy laws.
• Security Design: Design, build, and test security roles across various SAP environments (e.g., S/4HANA, Fiori).