Senior SAP Security & GRC Risk Tech Consultant

Ernst & Young Oman; Cleveland (OH); Hybrid; USD 103,000 - 188,000; Full time

Benefits offered by this job

Medical and dental coverage

401(k) plans

Paid time off

Hybrid work model

Job summary

EY in the US is seeking a Senior Consultant to help secure SAP environments and strengthen GRC controls. You will design, configure, and implement SAP Security and GRC solutions across SAP landscapes, including transformation initiatives like S/4HANA and cloud-based deployments.

You’ll work with managers and partners in a collaborative, client‑facing role to improve business performance through risk-based security.

Qualifications

• 3–5+ years of experience supporting SAP Security and/or SAP GRC engagements
• Bachelor’s degree in computer science, information systems, information security, or related field preferred
• Hands-on Design, Build, Test, and Deploy activities for SAP Application Security across SAP ECC, S/4HANA, FIORI, ARIBA, HCM, or SuccessFactors
• Experience supporting SAP GRC Access Control (e.g., version 12.0 or similar technologies), including exposure to IAM integrations
• Experience supporting SoD and Critical Action rule sets, access provisioning, and emergency access processes
• Ability to manage multiple workstreams with guidance and supervision
• Willingness to travel based on client needs (estimated up to 80%); valid U.S. driver’s license and passport required

Responsibilities

• Supporting the design, configuration, and implementation of SAP Application Security and SAP GRC Access Control solutions across SAP environments
• Assisting with SAP transformation initiatives, including S/4HANA and cloud-based SAP solutions, under the guidance of managers and senior leaders
• Performing security role design, user provisioning, access reviews, and Segregation of Duties (SoD) analysis in alignment with defined risk frameworks
• Supporting SAP audit activities (internal and external), including evidence collection, issue remediation, and control documentation
• Collaborating with functional and technical stakeholders to gather requirements and document security‑related processes
• Contributing to the development of deliverables, workpapers, and client‑facing documentation
• Working effectively within onshore and offshore delivery models as part of a broader project team
• Staying current on SAP Security, GRC tools, and industry developments through training and on‑the‑job learning

Skills

SAP Security

GRC Access Control

SoD analysis

Client-facing communication

Education

Bachelor's degree in CS / information security

Tools

Saviynt

SailPoint

SAP IAG

ServiceNow

HP ALM

Job description

EY in the US is seeking a Senior Consultant to help secure SAP environments and strengthen GRC controls. You will design, configure, and implement SAP Security and GRC solutions across SAP landscapes, including transformation initiatives like S/4HANA and cloud-based deployments.

You’ll work with managers and partners in a collaborative, client‑facing role to improve business performance through risk-based security.