SAP Security / GRC Consultant

Quadric It; Hyderabad; On-site; INR 1,800,000 - 2,800,000; Full time

Job summary

Quadric IT is seeking a Senior SAP Security / GRC Consultant to design, build, and run secure, audit-ready role and access frameworks for clients. You will own SAP Security and GRC Access Control workstreams on S/4HANA implementations, ECC-to-S/4HANA conversions and managed-support engagements.

You will collaborate with client IT, internal audit, and business owners, and mentor junior consultants in Hyderabad.

Qualifications

• 8+ years of hands-on SAP Security experience, including 4+ years in SAP GRC Access Control (10.x / 12.0).
• 2+ full-lifecycle SAP S/4HANA implementations or conversions in a security lead or senior role.
• Strong command of SAP security tools and governance processes.

Responsibilities

• Design, build and run secure, audit-ready role and access frameworks for clients.
• Own SAP Security and GRC Access Control workstreams on S/4HANA implementations and conversions.
• Mentor junior consultants in Hyderabad delivery center.

Skills

SAP Security

GRC Access Control

S/4HANA security

PFCG

SU24

SU25

SU53

SUIM

Fiori security

HANA security

Tools

PFCG

SU24

SU25

SU53

SUIM

ST01

Job description

Job Summary

Senior SAP Security / GRC Consultant

Experience: 8+ years in SAP Security, including 4+ years in SAP GRC Access Control

Location: Hyderabad, India

Employment type: Full-time

Travel: UK/EU as projects require

Reports to: SAP Practice Lead, Quadric IT

Role Summary

We are hiring a Senior SAP Security / GRC Consultant to design, build and run secure, audit-ready role and access frameworks for our clients. You will own SAP Security and GRC Access Control workstreams on S/4HANA implementations, ECC-to-S/4HANA conversions and managed-support engagements. You will work directly with client IT, internal audit and business owners, and mentor junior consultants in our Hyderabad delivery center.

Key Responsibilities

SAP Security

• Design and build role concepts (single, composite, derived and business roles) for S/4HANA, ECC, BW/4HANA and Fiori using PFCG.
• Configure Fiori security: catalogs, business groups, spaces and pages, OData service authorizations and launchpad content.
• Manage user administration, CUA, password policies and SU24 authorization defaults.
• Secure S/4HANA and HANA databases: HANA roles, privileges and analytic authorizations.
• Troubleshoot access issues using SU53, ST01/STAUTHTRACE and SUIM; resolve tickets within SLA.
• Lead security workstreams in ECC-to-S/4HANA conversions, including role remediation and SU25 upgrades.

SAP GRC Access Control

• Implement and support GRC Access Control 12.0 modules: ARA, ARM, BRM and EAM (Firefighter).
• Build and maintain SoD rulesets, mitigating controls and risk analysis for business processes.
• Configure MSMP workflows and BRF+ rules for access request approvals.
• Run periodic User Access Reviews (UAR) and SoD reviews; produce audit-ready evidence.
• Integrate GRC with connected systems, IdM and cloud identity (SAP Cloud Identity Services / IAG) where in scope.

Audit, compliance and delivery

• Support SOX, GxP, ITGC and internal / external audits with clear controls documentation.
• Prepare design documents, test scripts and cutover plans; lead unit, integration and UAT testing for roles.
• Advise clients on security best practice, least privilege and license optimization.
• Mentor junior consultants and contribute to Quadric IT accelerators, templates and presales estimates.

Required skills and experience

• 8+ years of hands-on SAP Security experience, with at least 4 years in SAP GRC Access Control (10.x / 12.0).
• 2+ full-lifecycle SAP S/4HANA implementations or conversions in a security lead or senior role.
• Strong command of PFCG, SU24, SU25, SUIM, SU53, ST01/STAUTHTRACE, CUA and user administration.
• Proven Fiori security design: catalogs, groups, spaces/pages and OData services.
• Hands-on GRC configuration: ARA

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.