SAP GRC & HANA Security Architect

Kyndryl; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Kyndryl is seeking an SAP GRC and HANA Security Consultant to design, implement, and govern access controls across our SAP landscape. This hands-on role covers GRC Access Control, HANA security, and SAP application security, with a strong emphasis on audit readiness and SOX ITGC.

You will build and maintain role architecture for S/4HANA, HANA, and Fiori, manage GRC end-to-end, and interact with auditors and business owners to ensure compliant access controls.

Qualifications

• Bachelor's degree in CS, IS, or related field or equivalent experience.
• 5+ years hands-on SAP security experience, incl. at least 3 years with SAP GRC Access Control 10.x/12.0.
• Hands-on HANA security administration: roles, privileges, analytic privileges, and audit policies.
• Strong PFCG role design, authorization objects, SU24 maintenance, and trace-based troubleshooting.
• Experience with S/4HANA and Fiori security concepts.
• Experience supporting SOX ITGC or equivalent audits in an SAP environment.
• Proven ability to remediate segregation-of-duties conflicts and design mitigating controls.
• Clear written and verbal communication to explain risk to stakeholders.

Responsibilities

• Configure, administer, and support SAP GRC Access Control across modules ARA, ARM, BRM, and EAM.
• Maintain and customize SoD ruleset; apply updates and assess landscape impact.
• Design MSMP workflows, BRF+ rules, and approval paths for access requests and role changes.
• Perform periodic risk analysis at user, role, and profile levels; drive remediation and mitigating controls.
• Administer User Access Reviews, SoD Review, and Firefighter log reviews; track completion.
• Support GRC Process Control, Risk Management, and Audit Management; evaluate migration to IAG.
• Administer HANA security: catalog/roles, privileges, auditing, and encryption.
• Configure and monitor HANA audit policies; provide forensic trails.
• Set up SSO and authentication methods (SAML 2.0, Kerberos, X.509).
• Lead security workstreams for S/4HANA implementations; role redesign and remediation.
• Troubleshoot authorization failures and provide L3 security incident support.

Skills

GRC Access Control

HANA Security

PFCG Role Design

S/4HANA Security

SoD & Audit

SOX ITGC

Communication Skills

Education

Bachelor's degree in Computer Science, Information Systems, or related field

Job description

Kyndryl is seeking an SAP GRC and HANA Security Consultant to design, implement, and govern access controls across our SAP landscape. This hands-on role covers GRC Access Control, HANA security, and SAP application security, with a strong emphasis on audit readiness and SOX ITGC.

You will build and maintain role architecture for S/4HANA, HANA, and Fiori, manage GRC end-to-end, and interact with auditors and business owners to ensure compliant access controls.