Senior SAP Security & GRC Risk Consultant

EY; Minneapolis (MN); Hybrid; USD 103,000 - 213,000; Full time

Benefits offered by this job

Medical and dental coverage

Pension and 401(k) plans

Paid time off options

Hybrid model

Job summary

EY is seeking SAP Security and GRC professionals to support risk technology initiatives, designing and implementing SAP Security and GRC capabilities across client transformations. You will work alongside managers and partners, gaining exposure to complex SAP environments while developing deep technical expertise and client-facing skills within EY’s collaborative culture.

You will contribute to delivering SAP security controls, access reviews, and audit readiness while collaborating with

Qualifications

• 3–5+ years of experience supporting SAP Security and/or SAP GRC engagements
• Bachelor’s degree in computer science, information systems, information security, or related field
• Hands‑on experience with Design, Build, Test, and Deploy activities for SAP Application Security across systems such as SAP ECC, S/4HANA, FIORI, ARIBA, HCM, or SuccessFactors
• Experience supporting SAP GRC Access Control (e.g., version 12.0 or similar technologies), including exposure to IAM integrations (Saviynt, SailPoint, SAP IAG)
• Ability to manage multiple workstreams with guidance and supervision
• Willingness to travel based on client needs (estimated up to 80%); valid U.S. driver’s license and passport required

Responsibilities

• Design, configuration, and implementation of SAP Application Security and SAP GRC Access Control
• Assisting with SAP transformation initiatives, including S/4HANA and cloud-based SAP solutions
• Performing security role design, user provisioning, access reviews, and SoD analysis
• Supporting SAP audit activities (internal and external)
• Collaborating with stakeholders to gather requirements and document security processes
• Contributing to deliverables, workpapers, and client-facing documentation
• Working within onshore/offshore delivery models as part of a project team
• Staying current on SAP Security and GRC tools and industry developments

Skills

SAP Security

GRC

SoD analysis

IAM integrations

Audit support

Requirements gathering

Documentation

Team collaboration

Education

Bachelor's degree in computer science, information systems, information security, or a related field

Tools

Saviynt

SailPoint

SAP IAG

ServiceNow

HP ALM

Job description

EY is seeking SAP Security and GRC professionals to support risk technology initiatives, designing and implementing SAP Security and GRC capabilities across client transformations. You will work alongside managers and partners, gaining exposure to complex SAP environments while developing deep technical expertise and client-facing skills within EY’s collaborative culture.

You will contribute to delivering SAP security controls, access reviews, and audit readiness while collaborating with