Senior SAP Security & GRC Lead (S/4HANA)

IBM; Quezon City; On-site; PHP 1,400,000 - 2,100,000; Full time

Job summary

IBM Consulting in Manila is seeking an experienced SAP Security professional to lead regional security operations for SAP S/4HANA and GRC. You will oversee high-volume access tickets, perform SoD analyses, and design secure role architectures aligned with security standards.

Responsibilities include RCA, backlog management, and collaboration with regional stakeholders to ensure audit readiness and process improvements.

Qualifications

• 8+ years of hands‑on SAP Security experience, with strong experience in SAP S/4HANA access operations.
• Strong expertise in SAP GRC, particularly: Access Risk Analysis (ARA), Access Request Management (ARM), Emergency Access Management (EAM).
• Strong working knowledge of SAP authorization and user administration using PFCG, SU01, SU53, and SUIM.

Responsibilities

• Lead regional shift handoffs, queue management, SLA adherence, escalations, quality reviews, and stakeholder communications.
• Manage and resolve complex SAP S/4HANA and SAP GRC access tickets, including user provisioning, role assignments, SoD analysis, authorization errors, firefighter/emergency access, expired access, and approval/workflow defects.
• Review access requests and changes for accuracy and completeness before closure, ensuring correct role and access level, correct business approver, validity period, and SoD analysis.
• Design, maintain, and support SAP HANA/S/4HANA security roles and authorization concepts in alignment with business requirements and security standards.
• Support SAP GRC Access Risk Analysis (ARA), Access Request Management (ARM), and Emergency Access Management (EAM) processes.
• Investigate recurring access and authorization issues, perform root-cause analysis (RCA), and recommend sustainable corrective actions.
• Maintain regional knowledge bases, standard operating procedures, and security runbooks to improve operational consistency and resolution efficiency.
• Identify recurring incidents and operational gaps and feed them into the role design, GRC, process improvement, and automation backlogs.
• Manage high-volume security support queues while balancing incident priority, SLA commitments, business impact, and resource availability.
• Coordinate escalations with functional, technical, Basis, application, and business teams to drive timely resolution.
• Support audit and compliance activities by maintaining accurate access records, approval documentation, SoD results, and audit evidence.

Skills

SAP S/4HANA access ops

SAP GRC (ARA/ARM/EAM)

PFCG SU01 SU53 SUIM

SoD analysis

Root-cause analysis

Shift leadership

Backlog management

Audit & compliance

Education

Bachelor's Degree

Tools

SAP S/4HANA

SAP GRC tools

Job description

IBM Consulting in Manila is seeking an experienced SAP Security professional to lead regional security operations for SAP S/4HANA and GRC. You will oversee high-volume access tickets, perform SoD analyses, and design secure role architectures aligned with security standards.

Responsibilities include RCA, backlog management, and collaboration with regional stakeholders to ensure audit readiness and process improvements.