Senior SAP Security IAM Consultant

EY; Bengaluru; On-site; INR 1,600,000 - 2,600,000; Full time

Job summary

EY in Bengaluru seeks an experienced SAP Security, GRC and Identity Access Management professional to oversee end-to-end SAP user access, role design and governance across a complex SAP landscape including S/4HANA Rise and related SAP applications. The role spans access provisioning, risk analysis, audits and security operations.

The candidate will manage experience in GRC AC/PC, IDM, BTP, Ariba and SuccessFactors, providing escalated support and continuous improvement in access controls and

Qualifications

• SAP user access management and role lifecycle experience.
• SOB governance, audits and risk analysis.
• Experience with IAM provisioning and reconciliation.

Responsibilities

• Manage SAP user access using approved access requests and governance.
• Own role design, testing, transport and maintenance.
• Administer GRC Access Control across modules (ARA, EAM, ARM).
• Support CCM updates, control monitoring and evidence management.
• Manage identity lifecycle workflows, provisioning and deprovisioning.
• Lead access reviews and audit remediation tracking.
• Design and govern SoD and critical access rulesets for SAP.

Skills

SAP Security

GRC

Identity Access Management

Access Governance

Tools

SAP GRC Access Control

SAP IDM

SAP BTP

SAP SuccessFactors

Job description

Job Summary

We are looking for an experienced SAP Security, GRC and Identity Access Management professional to manage end-to-end SAP user access, role design, identity lifecycle, access governance, emergency access, risk analysis, audits and security operations across a complex SAP landscape. The role will support SAP S/4HANA on Rise, SAP GRC Access Control, SAP GRC Process Control, SAP IDM, SAP BTP, SAP Ariba, SAP SuccessFactors, SAP BW/BW4HANA and other integrated SAP applications.

Role Type

Senior Analyst / Consultant / Specialist / Lead, depending on experience

Primary Focus

User access management, role lifecycle, GRC operations, IDM provisioning, risk ruleset management, audits and access reviews

Landscape

SAP S/4HANA on Rise, SAP GRC AC/PC, SAP IDM, SAP BTP, Ariba, SuccessFactors, SAP BW/BW4HANA and related integrations

Role Summary Responsibilities

• SAP User Access Management: Create, modify, maintain and revoke SAP user access using approved access request, provisioning and governance processes.
• SAP Role Management: Own role requirement gathering, role design, build, testing, transport, go-live and ongoing maintenance.
• SAP GRC Access Control: Administer GRC Access Control processes across ARA, EAM, ARM and access governance workflows.
• SAP GRC Process Control: Support quarterly CCM updates, control monitoring, exception validation and control evidence management.
• SAP IDM: Manage identity lifecycle workflows, provisioning, deprovisioning, reconciliation and connector issue resolution.
• Access Reviews and Audits: Implement and operate user access reviews, firefighter reviews, audit evidence packs and remediation tracking.
• Risk Ruleset Management: Design, maintain, test and govern SoD and critical access rulesets for SAP and integrated applications.
• SAP Native Security: Assess SAP authorization, user, privileged access, RFC, technical user and security configuration risks.