Senior SAP GRC & Security Risk Tech Consultant

Ernst & Young Oman

Detroit (MI)

Hybrid

USD 103,000 - 188,000

Full time

14 days+

Application generator

An application made for this job — a tailored resume and cover letter that speak straight to the posting.

Get past ATS filters

Benefits offered by this job

Total Rewards package

Hybrid work model

Paid time off options

Job summary

EY, a leading global professional services firm, seeks a Senior Consultant in Risk Technology with SAP Security and GRC expertise to support client engagements across SAP Security and GRC capabilities. You will design, configure, and implement SAP security solutions, work with S/4HANA/cloud initiatives, and contribute to risk-based audits within a collaborative, client-focused environment.

You will join experienced teams, gain exposure to complex SAP landscapes, and develop technical and

Qualifications

3–5+ years of experience supporting SAP Security and/or SAP GRC engagements.
Bachelor’s degree in computer science, information systems, information security, or a related field (preferred).
Hands-on Design, Build, Test, and Deploy activities for SAP Application Security across systems such as SAP ECC, S/4HANA, FIORI, ARIBA, HCM, or SuccessFactors.
Experience supporting SAP GRC Access Control (e.g., version 12.0 or similar technologies), including exposure to IAM integrations (Saviynt, SailPoint, SAP IAG).
Experience supporting SoD and Critical Action rule sets, access provisioning, and emergency access processes.
Ability to manage multiple workstreams with guidance and supervision.
Willingness to travel based on client needs (estimated up to 80%); valid U.S. driver’s license and passport required.

Responsibilities

Supporting the design, configuration, and implementation of SAP Application Security and SAP GRC Access Control solutions across SAP environments.
Assisting with SAP transformation initiatives, including S/4HANA and cloud-based SAP solutions, under the guidance of managers and senior leaders.
Performing security role design, user provisioning, access reviews, and SoD analysis in alignment with defined risk frameworks.
Supporting SAP audit activities (internal and external), including evidence collection, issue remediation, and control documentation.
Collaborating with functional and technical stakeholders to gather requirements and document security-related processes.
Contributing to the development of deliverables, workpapers, and client-facing documentation.
Working effectively within onshore and offshore delivery models as part of a broader project team.
Staying current on SAP Security, GRC tools, and industry developments through training and on-the-job learning.