SAP Security GRC Consultant

NTT DATA BUSINESS SOLUTIONS; Hyderabad; On-site; INR 1,200,000 - 2,400,000; Full time

Job summary

NTT DATA BUSINESS SOLUTIONS in Hyderabad is seeking a SAP Security GRC Consultant to design, implement, and maintain robust SAP security frameworks across S/4HANA and related SAP systems.

The role focuses on ensuring proper user access, roles, and authorizations aligned with business processes and audit requirements, including SOX and GDPR compliance, with responsibilities spanning workshops, reviews, and security testing.

Qualifications

• Bachelor's degree required in CS/IS or related field.
• 58 years of SAP Security experience, with at least 2 years in S/4HANA environments.
• SAP Certified Technology Associate SAP System Security and Authorizations preferred.

Responsibilities

• Design and implement SAP S/4HANA security architecture, including roles, profiles, and authorizations.
• Create, maintain, and manage user roles across SAP landscapes (ECC, Fiori, GRC, BW, HANA).
• Perform role design workshops with process owners and map access requirements.
• Conduct periodic user access reviews and compliance audits (SOX, GDPR).
• Integrate SAP S/4HANA Security with SAP GRC Access Control for risk and compliance management.

Skills

SAP Authorization concepts

S/4HANA Security

GRC Access Control

SOX/GDPR compliance

Education

Bachelor's degree in Computer Science or related field

Tools

SAML

OAuth

SSO

Job description

Job Summary

We are currently seeking a SAP Security GRC Consultant to join our team in Hyderabad.

Role Overview

The SAP S/4HANA Security Consultant is responsible for designing, implementing, and maintaining robust SAP security frameworks. The role ensures that user access, roles, and authorizations align with business processes, compliance standards, and audit requirements within S/4HANA and associated SAP systems.

Responsibilities

• Design and implement SAP S/4HANA security architecture, including roles, profiles, and authorizations.


• Create, maintain, and manage user roles across multiple SAP landscapes (ECC, Fiori, GRC, BW, HANA).


• Perform role design workshops with business process owners and map access requirements.


• Conduct periodic user access reviews and compliance audits (SOX, GDPR, etc.).


• Implement and maintain Fiori catalog, group, and role assignments for users.


• Troubleshoot authorization issues and analyze SU53 logs, ST01 traces, and security dumps.


• Integrate SAP S/4HANA Security with SAP GRC Access Control for risk and compliance management.


• Support system migrations and upgrades by validating roles and performing security testing.


• Ensure adherence to segregation of duties (SoD) principles and remediation of conflicts.


• Prepare and maintain documentation for security policies, processes, and configurations.

Required Skills

• Strong understanding of SAP authorization concepts (PFCG, SU24, SU53, SUIM).


• Deep experience with SAP S/4HANA Security, Fiori, and HANA database security.


• Proficiency in SAP GRC Access Control (ARM, ARA, BRM, EAM modules).


• Knowledge of SAML, OAuth, and Single Sign-On (SSO) integrations.


• Strong communication and documentation skills to work with auditors and stakeholders.

Qualifications

• Bachelors degree in Computer Science, Information Systems, or related field.


• 58 years of SAP Security experience, with at least 2 years in S/4HANA environments.


• SAP Certified Technology Associate SAP System Security and Authorizations preferred.


• Experience with SAP Cloud Identity Services and SAP BTP Security is an advantage.