SAP Security & GRC Consultant (S/4HANA) - 1-year renewable contract (Mining)

Evolution Singapore; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Evolution Singapore seeks an experienced SAP security and GRC consultant to lead access readiness and control assurance for regional S/4HANA migrations, including S/4HANA, Fiori and BTP environments.

You will own triage of SAP, BTP and integration access issues during SIT, cutover rehearsals and hypercare, coordinating with BASIS/BTP, Integration, QA and readiness teams to ensure evidence-ready security gates and compliant cutover activity.

Qualifications

• SAP S/4HANA security and GRC consulting across S/4HANA, Fiori, SailPoint ARM, RBAC and emergency access.
• Working knowledge of BTP security, identity providers, roles, destinations and service credentials.
• Experience supporting formal test phases, cutover rehearsals, go live and hypercare.
• Strong documentation and reporting discipline for quality gates and audit evidence.

Responsibilities

• Own regional triage of SAP, BTP and integration access issues during SIT, cutover rehearsal and hypercare.
• Validate critical user, vendor, SME and support access before planned test and cutover windows.
• Consult on role remediation, emergency access, GRC controls, access evidence and segregation-of-duties impact assessment.
• Partner with BASIS/BTP and Integration teams on service users, certificates, destinations and connectivity access dependencies.
• Provide concise security status, risks and evidence for QA gates and leadership reporting.
• Access readiness checklist for each test and cutover gate.
• Security issue log with owner, impact, workaround, target date and escalation path.
• Evidence pack for critical access, service users and emergency access model.
• Cutover security inputs for freeze, emergency support, validation and hypercare handover.

Skills

SAP security & GRC

S/4HANA & Fiori security

RBAC & emergency access

BTP security & identity providers

Tools

SailPoint ARM

Job description

JD

Role family

SAP S/4HANA security, GRC, access readiness and control assurance

S/4HANA and BTP migration with regional support across SIT, UAT alignment, cutover and hypercare.

Primary phase

Phase 1 mobilisation through SIT/SIT2, cutover readiness and hypercare.

Location model

Regional hub aligned to Singapore.

Primary interfaces

Tech Platform Lead, Security, BASIS/BTP, Integration, QA & Readiness Assurance, Accenture, SMEs and third parties.

SIT to hypercare

Primary value

Access readiness and security controls

Position purpose

Provide SAP S/4HANA security and GRC consulting so SAP, BTP, vendor and support access is ready, controlled and evidenced for formal test and cutover gates. The role resolves access blockers and supports compliant security outcomes without slowing regional execution.

• Own regional triage of SAP, BTP and integration access issues during SIT, cutover rehearsal and hypercare.
• Validate critical user, vendor, SME and support access before planned test and cutover windows.
• Consult on role remediation, emergency access, GRC controls, access evidence and segregation-of-duties impact assessment.
• Partner with BASIS/BTP and Integration teams on service users, certificates, destinations and connectivity access dependencies.
• Provide concise security status, risks and evidence for QA gates and leadership reporting.
• Access readiness checklist for each test and cutover gate.
• Security issue log with owner, impact, workaround, target date and escalation path.
• Evidence pack for critical access, service users and emergency access model.
• Cutover security inputs for freeze, emergency support, validation and hypercare handover.

Skills and experience

• SAP security and GRC consulting experience across S/4HANA, Fiori, SailPoint ARM, role-based access control, segregation of duties and emergency access.
• Working knowledge of BTP security, identity providers, roles, destinations and service credentials.
• Experience supporting formal test phases, cutover rehearsals, go live and hypercare.
• Strong documentation and reporting discipline for quality gates and audit evidence.

Success measures

• No planned test or cutover activity is blocked by avoidable access readiness gaps.
• Critical access issues are triaged within the regional working day.
• Security gate evidence is complete, traceable and accepted.