Senior SAP Security & GRC Risk Tech Consultant

EY; Pittsburgh (Allegheny County); Hybrid; USD 103,000 - 188,000; Full time

Benefits offered by this job

Hybrid work model

Medical and dental coverage

Pension and 401(k)

Job summary

EY is seeking a Senior Consultant to support SAP Security and GRC engagements, delivering design, configuration, and implementation across SAP environments. You will work with cross-functional teams to strengthen SAP security and compliance while assisting with SAP transformation initiatives and audits.

The role requires hands-on experience with SAP Security and GRC, SoD analysis, and IAM integrations, with travel up to 80% and a collaborative, delivery-focused mindset.

Qualifications

• 3–5+ years of experience supporting SAP Security and/or SAP GRC engagements.
• Bachelor’s degree in computer science, information systems, information security, or a related field (preferred).
• Hands-on experience with Design, Build, Test, and Deploy activities for SAP Application Security across systems such as SAP ECC, S/4HANA, FIORI, ARIBA, HCM, or SuccessFactors.
• Experience supporting SAP GRC Access Control (e.g., version 12.0 or similar technologies), including exposure to IAM integrations (e.g., Saviynt, SailPoint, SAP IAG).
• Experience supporting SoD and Critical Action rule sets, access provisioning, and emergency access processes.
• Ability to manage multiple workstreams with guidance and supervision.
• Willingness to travel based on client needs (estimated up to 80%); valid U.S. driver’s license and passport required.

Responsibilities

• Support delivery teams across SAP Security and GRC engagements by designing, configuring, and implementing SAP Application Security and SAP GRC Access Control solutions.
• Assist with SAP transformation initiatives, including S/4HANA and cloud-based SAP solutions.
• Perform security role design, user provisioning, access reviews, and SoD analysis per risk frameworks.
• Support SAP audit activities (internal and external), including evidence collection and control documentation.
• Collaborate with stakeholders to gather requirements and document security-related processes.
• Contribute to deliverables, workpapers, and client-facing documentation.
• Work effectively within onshore and offshore delivery models as part of a project team.
• Stay current on SAP Security, GRC tools, and industry developments through training and on-the-job learning.

Skills

SAP Security

SAP GRC

Access Controls

SoD analysis

IAM integrations

Auditing

Education

Bachelor's degree in CS/IS/Security

Tools

SAP ECC

S/4HANA

FIORI

ARIBA

HCM

SuccessFactors

Saviynt

SailPoint

SAP IAG

ServiceNow

HP ALM

Job description

EY is seeking a Senior Consultant to support SAP Security and GRC engagements, delivering design, configuration, and implementation across SAP environments. You will work with cross-functional teams to strengthen SAP security and compliance while assisting with SAP transformation initiatives and audits.

The role requires hands-on experience with SAP Security and GRC, SoD analysis, and IAM integrations, with travel up to 80% and a collaborative, delivery-focused mindset.