Senior SAP Security & GRC Consultant

EY; San Francisco (CA); Hybrid; USD 103,000 - 188,000; Full time

Benefits offered by this job

Hybrid work model

Medical and dental coverage

Pension and 401(k)

Paid time off

Job summary

EY is seeking SAP Security and GRC professionals to help strengthen client SAP security and compliance environments. The Senior Consultant will design, configure, and implement SAP Security and GRC Access Control across transformation initiatives, working with managers and partners.

The role emphasizes hands-on implementation, collaboration, and ongoing learning within EY’s people-oriented culture. Expect travel and a hybrid work model across multiple US locations.

Qualifications

• 3–5+ years of experience supporting SAP Security and/or SAP GRC engagements
• Bachelor’s degree in computer science, information systems, information security, or related field (preferred)
• Hands‑on experience with Design, Build, Test, and Deploy activities for SAP Application Security across SAP systems (ECC, S/4HANA, FIORI, ARIBA, HCM, SuccessFactors)
• Experience with SAP GRC Access Control (e.g., version 12.0) and IAM integrations (Saviynt, SailPoint, SAP IAG)
• Experience with SoD and Critical Action rule sets, access provisioning, and emergency access processes
• Ability to manage multiple workstreams with guidance and supervision
• Willingness to travel up to 80%; valid US driver’s license and passport

Responsibilities

• Support design, configuration, and implementation of SAP Application Security and SAP GRC Access Control across SAP environments
• Assist with SAP transformation initiatives (S/4HANA, cloud) under supervision
• Perform security role design, user provisioning, access reviews, SoD analysis
• Support SAP audit activities (evidence collection, remediation, documentation)
• Collaborate with stakeholders to gather requirements and document security processes
• Develop deliverables, workpapers, and client-facing documentation
• Work within onshore and offshore delivery models as part of a project team
• Stay current on SAP Security, GRC tools, and industry developments through training

Skills

SAP Security

GRC Access Control

SAP Application Security

Risk management

SoD analysis

IAM integrations

Audit activities

Documentation

Client communication

Travel flexibility

Education

Bachelor's degree in computer science / information systems

Tools

Saviynt

SailPoint

SAP IAG

ServiceNow

HP ALM

Job description

EY is seeking SAP Security and GRC professionals to help strengthen client SAP security and compliance environments. The Senior Consultant will design, configure, and implement SAP Security and GRC Access Control across transformation initiatives, working with managers and partners.

The role emphasizes hands-on implementation, collaboration, and ongoing learning within EY’s people-oriented culture. Expect travel and a hybrid work model across multiple US locations.