Risk Consulting - Risk Technology - SAP GRC & Security - Senior Consultant

EY; Portland (OR); Hybrid; USD 103,000 - 188,000; Full time

Benefits offered by this job

Hybrid work model

Total Rewards package

Job summary

EY is seeking SAP Security and GRC professionals to join a growing Risk Technology practice in a Senior Consultant role. You will design, configure, and implement SAP Security and GRC capabilities across transformation programs, including S/4HANA and cloud SAP solutions, while collaborating with onshore and offshore teams.

You will support audits, role design, user provisioning, and SoD analyses, contributing to client deliverables and documentation while staying current with SAP security trends

Qualifications

• 3–5+ years of experience supporting SAP Security and/or SAP GRC engagements.
• Bachelor’s degree in computer science, information systems, information security, or a related field (preferred).
• Hands-on experience with Design, Build, Test, and Deploy activities for SAP Application Security across SAP ECC, S/4HANA, FIORI, ARIBA, HCM, or SuccessFactors.
• Experience with SAP GRC Access Control (v12.0 or similar) including IAM integrations (Saviynt, SailPoint, SAP IAG).
• Experience with SoD and Critical Action rule sets, access provisioning, and emergency access processes.
• Ability to manage multiple workstreams with supervision; willingness to travel up to 80% with valid US license and passport.

Responsibilities

• Support design, configuration, and implementation of SAP Application Security and SAP GRC Access Control across SAP environments.
• Assist with SAP transformation initiatives including S/4HANA and cloud-based SAP solutions.
• Perform security role design, user provisioning, access reviews, and SoD analysis per risk frameworks.
• Support SAP audit activities including evidence collection, remediation, and control documentation.
• Collaborate with stakeholders to gather requirements and document security-related processes.
• Contribute to deliverables, workpapers, and client-facing documentation.
• Operate within onshore and offshore delivery models as part of a broader project team.
• Stay current on SAP Security, GRC tools, and industry developments through training.

Skills

SAP Security

GRC Access Control

S/4HANA

Cloud SAP solutions

Risk management

SAP audit support

Documentation & analysis

Stakeholder collaboration

Education

Bachelor's degree in CS/IS or related field

Tools

ServiceNow

HP ALM

Saviynt

SailPoint

SAP IAG

Job description

Location: New York, Atlanta, Boston, Chicago, Cleveland, Dallas, Detroit, Pittsburgh, Hoboken, Houston, Los Angeles, McLean, Miami, Minneapolis, Charlotte, Philadelphia, Portland, San Francisco, Seattle

At EY, we're all in to shape your future with confidence.

We'll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world.

The opportunity

With rapid growth across SAP and Governance, Risk, and Compliance (GRC), EY is seeking SAP Security and GRC professionals who understand risk management challenges and can support improved business performance through SAP Application Security and GRC solutions. As a Senior Consultant in Risk Technology, you will support client engagements by contributing to the design, configuration, and implementation of SAP Security and GRC capabilities across transformation initiatives.

What We Look For

We are looking for SAP Application Security and GRC professionals with a strong technical foundation and hands‑on implementation experience who are eager to deepen their skills within EY’s standard tools, methodologies, and delivery approaches. This role is well‑suited for individuals who enjoy solving complex problems, collaborating within project teams, and supporting clients in strengthening their SAP security and compliance environments.

Your Key Responsibilities

As a Senior Consultant, you will support delivery teams across SAP Security and GRC engagements by:

• Supporting the design, configuration, and implementation of SAP Application Security and SAP GRC Access Control solutions across SAP environments


• Assisting with SAP transformation initiatives, including S/4HANA and cloud‑based SAP solutions, under the guidance of managers and senior leaders


• Performing security role design, user provisioning, access reviews, and Segregation of Duties (SoD) analysis in alignment with defined risk frameworks


• Supporting SAP audit activities (internal and external), including evidence collection, issue remediation, and control documentation


• Collaborating with functional and technical stakeholders to gather requirements and document security‑related processes


• Contributing to the development of deliverables, workpapers, and client‑facing documentation


• Working effectively within onshore and offshore delivery models as part of a broader project team


• Staying current on SAP Security, GRC tools, and industry developments through training and on‑the‑job learning

Skills And Attributes For Success

• Hands‑on experience supporting SAP Security and SAP GRC Access Control implementations


• Understanding of SAP Application Security concepts across on‑premise, cloud, and SaaS SAP applications


• Ability to execute defined tasks independently while escalating risks and issues appropriately


• Strong analytical, problem‑solving, and documentation skills


• Effective written and verbal communication skills, with the ability to work collaboratively across teams


• Comfort working in fast‑paced environments with shifting priorities

To qualify for the role, you must have

• 3–5+ years of experience supporting SAP Security and/or SAP GRC engagements


• A bachelor’s degree in computer science, information systems, information security, or a related field (preferred)


• Hands‑on experience with Design, Build, Test, and Deploy activities for SAP Application Security across systems such as SAP ECC, S/4HANA, FIORI, ARIBA, HCM, or SuccessFactors


• Experience supporting SAP GRC Access Control (e.g., version 12.0 or similar technologies), including exposure to IAM integrations (e.g., Saviynt, SailPoint, SAP IAG)


• Experience supporting SoD and Critical Action rule sets, access provisioning, and emergency access processes


• Ability to manage multiple workstreams with guidance and supervision


• Willingness to travel based on client needs (estimated up to 80%); valid U.S. driver’s license and passport required

Ideally, you’ll also have

• Progress toward or interest in obtaining relevant certifications (e.g., CISA, SAP Security, SAP GRC)


• Exposure to SAP audit processes and regulatory or compliance frameworks (e.g., SOX, GDPR)


• Familiarity with tools such as ServiceNow or HP ALM


• Awareness of emerging SAP technologies such as BTP, SAC, AI, or RPA

What We Offer You

At EY, we’ll develop you with future‑focused skills and equip you with world‑class experiences. We’ll empower you in a flexible environment, and fuel you and your extraordinary talents in a diverse and inclusive culture of globally connected teams. Learn more.

• We offer a comprehensive compensation and benefits package where you’ll be rewarded based on your performance and recognized for the value you bring to the business. The base salary range for this job in all geographic locations in the US is $102,500 to $187,900. The base salary range for New York City Metro Area, Washington State and California (excluding Sacramento) is $122,900 to $213,400. Individual salaries within those ranges are determined through a wide variety of factors including but not limited to education, experience, knowledge, skills and geography. In addition, our Total Rewards package includes medical and dental coverage, pension and 401(k) plans, and a wide range of paid time off options.


• Join us in our team‑led and leader‑enabled hybrid model. Our expectation is for most people in external, client serving roles to work together in person 40-60% of the time over the course of an engagement, project or year.


• Under our flexible vacation policy, you’ll decide how much vacation time you need based on your own personal circumstances. You’ll also be granted time off for designated EY Paid Holidays, Winter/Summer breaks, Personal/Family Care, and other leaves of absence when needed to support your physical, financial, and emotional well‑being.

EY accepts applications for this position on an on‑going basis.

EY focuses on high‑ethical standards and integrity among its employees and expects all candidates to demonstrate these qualities.

EY | Building a better working world

EY is building a better working world by creating new value for clients, people, society and the planet, while building trust in capital markets.

Enabled by data, AI and advanced technology, EY teams help clients shape the future with confidence and develop answers for the most pressing issues of today and tomorrow.

EY teams work across a full spectrum of services in assurance, consulting, tax, strategy and transactions. Fueled by sector insights, a globally connected, multi‑disciplinary network and diverse ecosystem partners, EY teams can provide services in more than 150 countries and territories.

EY provides equal employment opportunities to applicants and employees without regard to race, color, religion, age, sex, sexual orientation, gender identity/expression, pregnancy, genetic information, national origin, protected veteran status, disability status, or any other legally protected basis, including arrest and conviction records, in accordance with applicable law.

EY is committed to providing reasonable accommodation to qualified individuals with disabilities including veterans with disabilities. If you have a disability and either need assistance applying online or need to request an accommodation during any part of the application process, please call 1-800-EY-HELP3, select Option 2 for candidate related inquiries, then select Option 1 for candidate queries and finally select Option 2 for candidates with an inquiry which will route you to EY’s Talent Shared Services Team (TSS) or email the TSS at [e-mail].