TechOps-SAP-Security-GRC-Manager-GDSN02

Ernst & Young Advisory Services Sdn Bhd; Pune District; On-site; INR 3,500,000 - 9,000,000; Full time

Job summary

EY is seeking a SAP Security / GRC Manager to lead governance, risk and compliance initiatives across SAP landscapes. The role covers authorization concepts, SoD controls, audit compliance, user access management, and SAP GRC solutions, working with a high-caliber global team.

You will design security roles, manage GRC modules, and collaborate with auditors and stakeholders to ensure enterprise-wide governance and secure SAP environments.

Qualifications

• Bachelor's degree in computer science, information technology, or a related discipline.
• 10+–12+ years of experience in SAP Security and SAP GRC.
• Certifications such as CISA, CISM, CISSP are advantageous.

Responsibilities

• Lead SAP Security and GRC implementation, enhancement, and support activities.
• Design, build, and maintain SAP security roles and authorizations across ECC, S/4HANA, BW, CRM, SCM, SuccessFactors, Ariba, and Fiori.
• Manage SAP GRC Access Control modules (ARA, ARM, EAM, BRM).
• Define and enforce SoD policies and controls.
• Conduct periodic user access reviews and compliance assessments.
• Collaborate with auditors during SOX, internal, and external audits.
• Mentor junior SAP security consultants and lead offshore/onshore teams.

Skills

SAP Security

SAP GRC

Role design

User administration

SoD risk analysis

Audit compliance

Leadership

Stakeholder management

Education

Bachelor's degree in computer science or information technology

Tools

SAP IDM

SAP IAS/IPS

SAP BTP Security

SAP SuccessFactors Security

SAP Ariba Security

SAP HANA DB Security

SAP Cloud ALM

SAP Solution Manager

Job description

Service line - Position Title: TechOps_SAP_Security/GRC_Manager

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.

About Global Delivery Services

Global Delivery Services refers to EY's worldwide network of service delivery centers. The GDS team plays an important role in EY’s strategy by ensuring effective support to EY’s growth agenda.

Our journey started in 2002 with approximately 200 people. Today we stand at 80,000+ professionals in ten locations around the world. We operate in Argentina, China, Hungary, India, Philippines, Poland, Sri Lanka, Mexico, Spain and the United Kingdom.

Client service is focused on providing Consulting, Assurance, Tax, Strategy & Transactions, and Knowledge support to our clients around the world. The teams enable account teams worldwide to provide seamless, high-quality, value-added support, helping deliver exceptional client service.

Enablement Services provides cost-effective, high-skilled, and innovative services to support EY’s global and local enablement teams. Markets, BMC, AWS, Finance and Accounting, Risk Management, Procurement, People Shared Services, IT Service Delivery and IT Global Infrastructure services, are among the services offered by Enablement Services.

Our innovation specialists serve the GDS Client Service and Enablement Services teams, along with Service Lines, Core Business Services and Sectors. The team brings the desired environment, technologies and skilled teams together for facilitation, rapid prototyping and innovative thinking. The competencies offered include analytics, digital, user experience, mobile technology, infrastructure, Microsoft technologies and open innovation.

The Opportunity

The SAP Security / GRC Manager is responsible for leading SAP security strategy, governance, risk, and compliance initiatives across SAP landscapes. The role involves implementing and supporting SAP authorization concepts, Segregation of Duties (SoD) controls, risk mitigation, audit compliance, user access management, and SAP GRC solutions.

This is a fantastic opportunity to be part of a leading firm whilst being instrumental in the growth as you get to work with high quality team to support clients ensuring the stability of global 500 companies through best-in-class solutions, automation and innovation.

Your Key Responsibilities:

• Responsible for decision-making, optimizing processes, resource management, and overseeing team management as needed for task execution.
• Accountable for allocating personnel, supervising team members, assigning tasks, ensuring that the team has the necessary tools and support to succeed in their roles and optimizing and evaluating their performance to meet organizational goals.
• Lead SAP Security and GRC implementation, enhancement, and support activities.
• Design, build, and maintain SAP security roles and authorizations across SAP ECC, S/4HANA, BW, CRM, SCM, SuccessFactors, Ariba, and Fiori environments.
• Manage SAP GRC Access Control modules including:
• Access Risk Analysis (ARA)
• Access Request Management (ARM)
• Emergency Access Management (EAM)
• Business Role Management (BRM)
• Define and enforce Segregation of Duties (SoD) policies and controls.
• Conduct periodic user access reviews, role redesign, and compliance assessments.
• Work with auditors during SOX, internal, and external audits.
• Manage user provisioning, firefighter access, and compliance reporting.
• Support SAP Fiori security, launchpad roles, catalogs, groups, and spaces/pages.
• Perform security impact assessments during SAP implementations, upgrades, and migrations.
• Develop governance frameworks and security standards for SAP environments.
• Collaborate with business stakeholders, functional teams, Basis teams, and auditors.
• Lead offshore/onshore teams and mentor junior SAP security consultants.

Mandatory Skills

• Strong hands-on experience in SAP Security and Authorizations.
• Expertise in SAP GRC Access Control 10.x/12.x.
• Extensive experience in:
  • Role Design
  • Role Remediation
  • User Administration
  • SoD Risk Analysis
  • Audit Compliance
  • SAP ECC and S/4HANA Security experience.
  • SAP Fiori Security administration and troubleshooting.
• Experience with SAP authorization concepts:
  • PFCG
  • SU24
  • SU01
  • STAUTHTRACE
  • SU53
• Understanding of SAP Identity and Access Management processes.
• Knowledge of SAP security architecture and compliance frameworks.

Preferred Skills

• SAP IDM (Identity Management).
• SAP Cloud Identity Services (IAS/IPS).
• SAP BTP Security.
• SAP SuccessFactors Security.
• SAP Ariba Security.
• SAP HANA Database Security.
• Experience with SOX, GDPR, and ITGC compliance requirements.
• Exposure to SAP Cloud ALM and SAP Solution Manager.

Qualifications

• Experience: 10-12+ Years
• Employment Type: Full-Time
• Bachelor's degree in computer science, Information Technology, or related discipline.
• SAP Security and/or SAP GRC Certification preferred.
• Relevant compliance certifications (CISA, CISM, CISSP) are advantageous.
• Strong leadership and stakeholder management skills.
• Excellent analytical and problem-solving abilities.
• Experience managing audit and compliance engagements.
• Strong communication and presentation skills.
• Ability to drive governance and risk management initiatives.
• Team leadership and project management experience.

What we offer you

At EY, we’ll develop you with future-focused skills and equip you with world-class experiences. We’ll empower you in a flexible environment, and fuel you and your extraordinary talents in a diverse and inclusive culture of globally connected teams. Learn more.

To help create an equitable and inclusive experience during the recruitment process, please inform us as soon as possible about any disability-related adjustments or accommodations you may need.

Our Commitment:

As a commitment, we persistently endeavour to embody our values, fulfil our purpose, and champion inclusiveness. Our dedication is to cultivate EY into an environment where diverse perspectives are celebrated, creating a supportive atmosphere for individuals to authentically be themselves and contribute their utmost.

Professional Development:

From entry-level employees to senior leaders, we believe in continuous learning. We offer opportunities to build new skills, take on leadership roles, and connect and grow through mentorship.

People and Culture

In our dynamic workplace, diversity, equity, and inclusiveness are ingrained in our culture. We're united by a commitment to create an environment where every individual's differences are valued, practices are equitable, fostering a sense of belonging. Our shared values include integrity, respect, teaming, inclusiveness, energy, enthusiasm, courage to lead, and building relationships based on doing the right thing.

Benefits

Embark on a transformative career journey with us and indulge in a suite of premium benefits, encompassing exclusive health and wellness packages, enticing rewards, and cutting-edge learning opportunities that empower you to continually grow and excel in your professional and personal development.

Successful candidates advance to a competency-based interview. If mutual interest persists, a job offer awaits.

"We are an equal opportunity employer and are committed to Diversity, Equity & Inclusion".

EY | Building a better working world