SAP Security & GRC Architect (Strategic Design & Transformation)

HCLTech; Lucknow; On-site; INR 1,200,000 - 2,400,000; Full time

Job summary

HCLTech is seeking a seasoned SAP Security & GRC Architect to lead enterprise-wide security strategy for SAP landscapes across ECC, S/4HANA, and cloud environments. You will translate business and regulatory requirements into scalable security architectures and drive transformation roadmaps.

The role demands deep SAP GRC, S/4HANA security design, and strong executive communication skills to partner with leadership and customers globally.

Qualifications

• 15+ years SAP experience with 10+ years in SAP Security & GRC and 5+ years in architect/advisory roles.
• Deep expertise in SAP authorization concepts (PFCG, SU24, org-level design), Fiori/S/4HANA catalog and space security, and HANA DB security.
• Strong hands-on background with SAP GRC Access Control and exposure to SAP IAG / Cloud Identity services.
• Proven experience designing SoD rulesets, role architectures, and access governance at enterprise scale.
• Demonstrated experience in full-cycle S/4HANA security design (greenfield, brownfield, or bluefield).
• Solid understanding of SOX, ITGC, ISO 27001, NIST; comfortable owning audit conversations.

Responsibilities

• Define enterprise SAP Security and GRC strategy aligned with business and cyber-security objectives.
• Design target-state SAP Security architectures for ECC, S/4HANA, RISE with SAP, SAP BTP, SAP SAC, Ariba, SuccessFactors, MDG, IBP and other SAP solutions.
• Develop security transformation roadmaps for SAP modernization programs.
• Lead SAP Security assessments, maturity reviews, and governance workshops.
• Establish SAP Security standards, policies, and enterprise design principles.
• Define enterprise SoD frameworks and risk strategies.
• Design and govern SAP GRC Access Control solutions (ARA, ARM, EAM, BRM).
• Establish SAP controls aligned with SOX, ITGC, GDPR, ISO27001, NIST, and internal audit requirements.
• Lead compliance and audit engagements with internal and external auditors.
• Provide strategic recommendations for risk reduction and governance optimization.
• Design security models for S/4HANA transformations and RISE with SAP environments.
• Define security architecture for SAP BTP services, cloud integrations, APIs, and extensions.
• Develop Fiori security concepts, catalog design strategy, and role architecture.
• Drive SAP Identity and Access Management transformation initiatives.
• Serve as Security Design Authority for customer programs.
• Conduct executive-level workshops with customer leadership.
• Translate regulatory requirements into practical SAP security controls.
• Provide thought leadership on industry trends, SAP roadmap direction, and emerging risks.
• Support RFPs, solutioning, estimations, due diligence, and customer presentations.

Skills

SAP Security concepts

GRC Access Control (ARA/ARM/EAM/BRM)

SoD design & risk frameworks

S/4HANA security design

Fiori security and role architecture

SAP BTP security & cloud integrations

Identity governance (IAM)

Executive communication

Tools

SAP GRC Access Control 10.x/12.x

SAP IAG / Cloud Identity

Job description

Experience

15+ years SAP experience with 10+ years in SAP Security & GRC and at least 5 years in Architect / Advisory roles.

Role Summary

We are seeking a highly experienced and dynamic SAP Security & GRC Architect to lead enterprise-wide SAP Security, Governance, Risk, and Compliance strategy initiatives for global customers. This role is not a support or administration position. The successful candidate will act as a trusted advisor Customer and business leadership teams, helping define security roadmaps, governance frameworks, target operating models, and transformation strategies across SAP landscapes.

The ideal candidate should possess deep expertise across SAP ECC, S/4HANA, SAP BTP, SAP Fiori, SAP GRC, Cloud Platforms, Identity Governance, and emerging SAP security technologies while being capable of translating business and regulatory requirements into scalable and secure SAP architectures.

Key Responsibilities

Security Strategy & Architecture

• Define enterprise SAP Security and GRC strategy aligned with business and cyber-security objectives.
• Design target-state SAP Security architectures for ECC, S/4HANA, RISE with SAP, SAP BTP, SAP SAC, Ariba, SuccessFactors, MDG, IBP and other SAP solutions.
• Develop security transformation roadmaps for SAP modernization programs.
• Lead SAP Security assessments, maturity reviews, and governance workshops.
• Establish SAP Security standards, policies, and enterprise design principles.

Governance, Risk & Compliance

• Define enterprise Segregation of Duty (SoD) frameworks and risk strategies.
• Design and govern SAP GRC Access Control solutions (ARA, ARM, EAM, BRM).
• Establish SAP controls aligned with SOX, ITGC, GDPR, ISO27001, NIST, and internal audit requirements.
• Lead compliance and audit engagements with internal and external auditors.
• Provide strategic recommendations for risk reduction and governance optimization.

S/4HANA & Cloud Security

• Design security models for S/4HANA transformations and RISE with SAP environments.
• Define security architecture for SAP BTP services, cloud integrations, APIs, and extensions.
• Develop Fiori security concepts, catalog design strategy, and role architecture.
• Drive SAP Identity and Access Management transformation initiatives.

Advisory & Consulting

• Serve as Security Design Authority for customer programs.
• Conduct executive-level workshops with customer leadership.
• Translate regulatory requirements into practical SAP security controls.
• Provide thought leadership on industry trends, SAP roadmap direction, and emerging risks.
• Support RFPs, solutioning, estimations, due diligence, and customer presentations.

Operating Model & Governance

• Design enterprise SAP Security operating models.
• Establish governance structures, RACI matrices, and control ownership.
• Define KPIs, compliance reporting, and security health frameworks.
• Implement continuous improvement programs across SAP Security and GRC functions.

Leadership

• Mentor architects, leads, and security consultants.
• Build reusable frameworks, accelerators, and best practices.
• Collaborate with Cyber Security, IAM, Audit, Risk, Infrastructure, and SAP Platform teams.

Required Qualifications

• 15+ years SAP experience with 10+ years in SAP Security & GRC and at least 5 years in Architect / Advisory roles.
• Deep expertise in SAP authorization concepts (PFCG, SU24, org-level design), Fiori/S/4HANA catalog- and space-based security, and HANA DB security.
• Strong hands-on background (past or current) with SAP GRC Access Control 10.x/12.x (ARA, ARM, EAM, BRM) and exposure to SAP IAG / Cloud Identity services.
• Proven experience designing SoD rulesets, role architectures, and access governance models at enterprise scale.
• Demonstrated experience in at least one full-cycle S/4HANA security design (greenfield, brownfield, or bluefield).
• Solid understanding of audit and compliance frameworks: SOX, ITGC, ISO 27001, NIST; comfortable owning audit conversations.
• Ability to communicate complex security concepts to executives and non-technical stakeholders; strong documentation and presentation skills.