SAP Security & GRC Consultant

Visara Human Capital Services; Hyderabad; On-site; INR 1,800,000 - 3,000,000; Full time

Job summary

Visara Human Capital Services is seeking an experienced SAP Security and GRC Consultant with strong expertise in SAP role design, authorizations, access governance, and audit controls. The candidate will handle ECC-to-S/4HANA migration, Central User Administration, and SOX reporting, among other tasks.

The role covers user provisioning, SoD analysis, and GRC module support, with responsibilities spanning audits and control execution.

Qualifications

• Minimum eight years of SAP Security and GRC experience.
• Experience with SAP GRC Access Control.
• ECC‑to‑S/4HANA security migration experience.
• Central User Administration experience.
• Audit and controls execution.
• Periodic SOX reporting.
• SoD analysis and remediation.
• User provisioning and access management.
• SAP role design and authorization management.

Responsibilities

• Design and maintain SAP security roles and authorizations across ECC, S/4HANA, BW and Fiori.
• Support ECC-to-S/4HANA migration security activities.
• Perform user provisioning, de-provisioning and access lifecycle management.
• Configure Central User Administration (CUA).
• Configure and support SAP GRC Access Control modules (ARA, ARM, BRM, EAM).
• Conduct Segregation of Duties analysis and remediate conflicts.
• Create, assign and monitor mitigation controls.
• Configure access-request, role-approval and Firefighter workflows.
• Execute user-access reviews, access certifications and privileged-access reviews.
• Perform audit and control execution activities.
• Prepare periodic SOX compliance reports.
• Generate user activity, risk analysis and compliance reports.
• Investigate security incidents and missing authorizations.
• Troubleshoot authorization issues using SU53, ST01, STAUTHTRACE and SUIM.
• Collaborate with functional, technical, business and audit teams to implement secure SAP solutions.
• Prepare security documentation, audit evidence and remediation plans.
• Train end users and support teams on SAP Security and GRC processes.

Skills

SAP Security & GRC

SAP GRC Access Control

ECC-to-S/4HANA migration

Central User Administration

Audit and controls execution

Periodic SOX reporting

SoD analysis

User provisioning

Role design & authorization management

Tools

SU53

ST01

STAUTHTRACE

SUIM

Job description

Role & responsibilities

Role Summary

We are seeking an experienced SAP Security and GRC Consultant with strong expertise in SAP role design, authorizations, access governance, audit controls and compliance. The consultant must have hands‑on experience in ECC-to-S/4HANA migration, Central User Administration, SOX reporting and SAP GRC Access Control.

Key Responsibilities

• Design, create and maintain SAP security roles and authorizations across ECC, S/4HANA, BW and Fiori.
• Support security activities for ECC-to-S/4HANA migration projects.
• Perform user provisioning, de-provisioning and access lifecycle management.
• Configure and maintain Central User Administration (CUA).
• Configure and support SAP GRC Access Control modules, including ARA, ARM, BRM and EAM.
• Conduct Segregation of Duties analysis and remediate access conflicts.
• Create, assign and monitor mitigation controls.
• Configure and manage access-request, role-approval and Firefighter workflows.
• Execute user-access reviews, access certifications and privileged-access reviews.
• Perform audit and control‑execution activities.
• Prepare periodic monthly, quarterly and annual SOX compliance reports.
• Generate user-activity, risk-analysis and compliance reports.
• Investigate security incidents, missing authorizations and role conflicts.
• Troubleshoot authorization issues using SU53, ST01, STAUTHTRACE and SUIM.
• Work with functional, technical, business and audit teams to implement secure SAP solutions.
• Prepare security documentation, audit evidence and remediation plans.
• Train end users and support teams on SAP Security and GRC processes.

Mandatory Skills

• Minimum eight years of SAP Security and GRC experience
• SAP GRC Access Control
• ECC‑to‑S/4HANA security migration
• Central User Administration
• Audit and controls execution
• Periodic SOX reporting
• SoD analysis and remediation
• User provisioning and access management
• SAP role design and authorization management

SAP ECC, S/4HANA and Fiori Security

Preferred candidate profile

SAP Security & GRC Consultant

Experience: 8+ years
Role: Senior SAP Security & GRC Consultant

1. Candidates must be based in Hyderabad.
2. Candidates must be willing to attend one face-to-face client interview.
3. Candidates must be willing to work in a hybrid model from the client location.

SAP GRC - Minimum 8 years

Shift timing - General but should be flexible to work on different time zone based on project needs whenever require.