Senior SAP Security Consultant

IBM; Quezon City; On-site; PHP 1,400,000 - 2,100,000; Full time

Job summary

IBM Consulting in Manila is seeking an experienced SAP Security professional to lead regional security operations for SAP S/4HANA and GRC. You will oversee high-volume access tickets, perform SoD analyses, and design secure role architectures aligned with security standards.

Responsibilities include RCA, backlog management, and collaboration with regional stakeholders to ensure audit readiness and process improvements.

Qualifications

• 8+ years of hands‑on SAP Security experience, with strong experience in SAP S/4HANA access operations.
• Strong expertise in SAP GRC, particularly: Access Risk Analysis (ARA), Access Request Management (ARM), Emergency Access Management (EAM).
• Strong working knowledge of SAP authorization and user administration using PFCG, SU01, SU53, and SUIM.

Responsibilities

• Lead regional shift handoffs, queue management, SLA adherence, escalations, quality reviews, and stakeholder communications.
• Manage and resolve complex SAP S/4HANA and SAP GRC access tickets, including user provisioning, role assignments, SoD analysis, authorization errors, firefighter/emergency access, expired access, and approval/workflow defects.
• Review access requests and changes for accuracy and completeness before closure, ensuring correct role and access level, correct business approver, validity period, and SoD analysis.
• Design, maintain, and support SAP HANA/S/4HANA security roles and authorization concepts in alignment with business requirements and security standards.
• Support SAP GRC Access Risk Analysis (ARA), Access Request Management (ARM), and Emergency Access Management (EAM) processes.
• Investigate recurring access and authorization issues, perform root-cause analysis (RCA), and recommend sustainable corrective actions.
• Maintain regional knowledge bases, standard operating procedures, and security runbooks to improve operational consistency and resolution efficiency.
• Identify recurring incidents and operational gaps and feed them into the role design, GRC, process improvement, and automation backlogs.
• Manage high-volume security support queues while balancing incident priority, SLA commitments, business impact, and resource availability.
• Coordinate escalations with functional, technical, Basis, application, and business teams to drive timely resolution.
• Support audit and compliance activities by maintaining accurate access records, approval documentation, SoD results, and audit evidence.

Skills

SAP S/4HANA access ops

SAP GRC (ARA/ARM/EAM)

PFCG SU01 SU53 SUIM

SoD analysis

Root-cause analysis

Shift leadership

Backlog management

Audit & compliance

Education

Bachelor's Degree

Tools

SAP S/4HANA

SAP GRC tools

Job description

Introduction

A career in IBM Consulting is built on long-term client relationships and close collaboration worldwide. You’ll work with leading companies across industries, helping them shape their hybrid cloud and AI journeys. With support from our strategic partners, robust IBM technology, and Red Hat, you’ll have the tools to drive meaningful change and accelerate client impact. At IBM Consulting, curiosity fuels success. You’ll be encouraged to challenge the norm, explore new ideas, and create innovative solutions that deliver real results. Our culture of growth and empathy focuses on your long-term career development while valuing your unique skills and experiences.

Key Responsibilities

Your role and responsibilities

• Lead regional shift handoffs, queue management, SLA adherence, escalations, quality reviews, and stakeholder communications.
• Manage and resolve complex SAP S/4HANA and SAP GRC access tickets, including user provisioning, role assignments, SoD analysis, authorization errors, firefighter/emergency access, expired access, and approval/workflow defects.
• Analyze and troubleshoot SAP security and authorization issues using appropriate tools and transaction codes, including PFCG, SU01, SU53, and SUIM.
• Review access requests and changes for accuracy and completeness before closure, ensuring:
• Correct role and access level
• Correct business approver
• Correct validity period
• Completed and acceptable SoD analysis
• Required audit evidence attached
• No unmanaged security-matrix exceptions
• Design, maintain, and support SAP HANA/S/4HANA security roles and authorization concepts in alignment with business requirements and security standards.
• Support SAP GRC Access Risk Analysis (ARA), Access Request Management (ARM), and Emergency Access Management (EAM) processes.
• Investigate recurring access and authorization issues, perform root-cause analysis (RCA), and recommend sustainable corrective actions.
• Maintain regional knowledge bases, standard operating procedures, and security runbooks to improve operational consistency and resolution efficiency.
• Identify recurring incidents and operational gaps and feed them into the role design, GRC, process improvement, and automation backlogs.
• Manage high-volume security support queues while balancing incident priority, SLA commitments, business impact, and resource availability.
• Coordinate escalations with functional, technical, Basis, application, and business teams to drive timely resolution.
• Support audit and compliance activities by maintaining accurate access records, approval documentation, SoD results, and audit evidence.
• Communicate security risks, ticket status, operational issues, and escalations effectively to regional and business stakeholders.
• Contribute to continuous improvement of SAP security operations, controls, workflows, and automation.

Preferred Education

Bachelor's Degree

Must-Have Skills

Required technical and professional expertise

• 8+ years of hands‑on SAP Security experience, with strong experience in SAP S/4HANA access operations.
• Strong expertise in SAP GRC, particularly:
• Access Risk Analysis (ARA)
• Access Request Management (ARM)
• Emergency Access Management (EAM / Firefighter)
• Strong working knowledge of SAP authorization and user administration using PFCG, SU01, SU53, and SUIM.
• Proven experience handling high-volume SAP security support operations and managing competing priorities.
• Strong understanding of SAP role design, authorization concepts, access provisioning, and access governance.
• Experience with Segregation of Duties (SoD) analysis and remediation.
• Demonstrated experience in shift leadership, queue management, SLA management, escalations, and regional handoffs.
• Strong root‑cause analysis (RCA) and problem‑management skills, with the ability to identify recurring issues and drive permanent solutions.
• Experience with backlog management, operational reporting, and continuous improvement initiatives.
• Strong understanding of audit and compliance requirements, including maintaining appropriate access evidence and documentation.
• Ability to perform detailed access‑quality reviews and validate roles, approvers, validity periods, SoD results, evidence, and security‑matrix exceptions.
• Excellent written and verbal business communication skills, including the ability to communicate effectively with regional stakeholders and senior business teams.
• Strong documentation skills with experience creating and maintaining KB articles, SOPs, and operational runbooks.

Nice‑to‑Have Skills

Preferred technical and professional experience

• Exposure to SAP SuccessFactors and SAP Fieldglass security/access management.
• Awareness of SAP Identity Authentication Service (IAS) and SAP Identity Access Governance (IAG).
• Experience supporting or troubleshooting BRF+ workflows and SAP GRC approval workflows.
• Experience using ServiceNow dashboards for ticket, queue, SLA, and operational performance management.
• Working knowledge of SAP BPC/BW security and related authorization concepts.
• Experience with SAP security automation and opportunities for reducing manual access-management activities.
• Familiarity with SAP cloud security and identity/access-management concepts.
• SAP Security, S/4HANA, or GRC-related certifications.