Senior SAP GRC & Security Risk Consultant

Ernst & Young Oman; Los Angeles (CA); Hybrid; USD 103,000 - 188,000; Full time

Benefits offered by this job

Medical and dental coverage

Pension and 401(k) plans

Paid time off

Job summary

EY is seeking a Senior SAP Security & GRC Consultant to design, configure, and implement SAP Security and GRC capabilities across SAP landscapes. You will work with managers and partners on client engagements, building deep technical expertise within EY’s delivery framework.

The role involves hands-on implementation across SAP environments, collaboration with cross-functional teams, and travel up to 80% as needed. EY offers a hybrid work model and a comprehensive rewards package.

Qualifications

• 3–5+ years of experience supporting SAP Security and/or SAP GRC engagements.
• Bachelor’s degree in CS, Information Systems, Information Security, or related field (preferred).
• Hands‑on experience with Design, Build, Test, and Deploy for SAP Application Security across SAP ECC, S/4HANA, FIORI, ARIBA, HCM, or SuccessFactors.
• Experience supporting SAP GRC Access Control (e.g., version 12.0 or similar technologies), including exposure to IAM integrations (Saviynt, SailPoint, SAP IAG).
• Experience supporting SoD and Critical Action rule sets, access provisioning, and emergency access processes.

Responsibilities

• Supporting the design, configuration, and implementation of SAP Application Security and SAP GRC Access Control solutions across SAP environments.
• Assisting with SAP transformation initiatives, including S/4HANA and cloud-based SAP solutions, under the guidance of managers and senior leaders.
• Performing security role design, user provisioning, access reviews, and SoD analysis in alignment with defined risk frameworks.
• Supporting SAP audit activities (internal and external), including evidence collection, issue remediation, and control documentation.
• Collaborating with functional and technical stakeholders to gather requirements and document security‑related processes.
• Contributing to the development of deliverables, workpapers, and client‑facing documentation.
• Working effectively within onshore and offshore delivery models as part of a broader project team.
• Staying current on SAP Security, GRC tools, and industry developments through training and on‑the‑job learning.

Skills

SAP Security

GRC Access Control

S/4HANA

IAM integrations

Security design

Documentation

Education

Bachelor's degree in CS/IS/Security

Tools

Saviynt

SailPoint

SAP IAG

ServiceNow

HP ALM

Job description

EY is seeking a Senior SAP Security & GRC Consultant to design, configure, and implement SAP Security and GRC capabilities across SAP landscapes. You will work with managers and partners on client engagements, building deep technical expertise within EY’s delivery framework.

The role involves hands-on implementation across SAP environments, collaboration with cross-functional teams, and travel up to 80% as needed. EY offers a hybrid work model and a comprehensive rewards package.