Senior SAP Security & GRC Risk Tech Consultant

Ernst & Young Oman; San Francisco (CA); Hybrid; USD 103,000 - 188,000; Full time

Benefits offered by this job

Medical coverage

Dental coverage

Pension plan

401(k) plan

Paid time off

Job summary

EY in the United States is seeking a Senior Consultant to deliver SAP Security and GRC services across client engagements. You’ll design, configure, and implement SAP applications security and GRC controls, with exposure to S/4HANA and cloud-based solutions.

You'll work with managers and partners in a collaborative, flexible, hybrid environment, traveling up to 80% as needed, and contributing to deliverables, evidence collection, and client-facing documentation.

Qualifications

• 3–5+ years of experience supporting SAP Security and/or SAP GRC engagements
• Bachelor’s degree in computer science, information systems, information security, or a related field (preferred)
• Hands‑on experience with Design, Build, Test, and Deploy activities for SAP Application Security across systems such as SAP ECC, S/4HANA, FIORI, ARIBA, HCM, or SuccessFactors
• Experience supporting SAP GRC Access Control (e.g., version 12.0 or similar technologies), including exposure to IAM integrations (e.g., Saviynt, SailPoint, SAP IAG)
• Experience supporting SoD and Critical Action rule sets, access provisioning, and emergency access processes
• Ability to manage multiple workstreams with guidance and supervision
• Willingness to travel based on client needs (estimated up to 80%); valid U.S. driver’s license and passport required

Responsibilities

• Supporting the design, configuration, and implementation of SAP Application Security and SAP GRC Access Control solutions across SAP environments
• Assisting with SAP transformation initiatives, including S/4HANA and cloud-based SAP solutions
• Performing security role design, user provisioning, access reviews, and SoD analysis
• Supporting SAP audit activities (internal and external), including evidence collection, issue remediation, and control documentation
• Collaborating with functional and technical stakeholders to gather requirements and document security‑related processes
• Contributing to the development of deliverables, workpapers, and client‑facing documentation
• Working effectively within onshore and offshore delivery models as part of a broader project team
• Staying current on SAP Security, GRC tools, and industry developments through training and on‑the‑job learning

Skills

SAP Security & GRC experience

SAP GRC Access Control

Security design & user provisioning

Audit support & control documentation

Client communication

Education

Bachelor’s degree in CS/IS/Security

Tools

SAP ECC

S/4HANA

FIORI

ARIBA

HCM

SuccessFactors

Saviynt

SailPoint

SAP IAG

Job description

EY in the United States is seeking a Senior Consultant to deliver SAP Security and GRC services across client engagements. You’ll design, configure, and implement SAP applications security and GRC controls, with exposure to S/4HANA and cloud-based solutions.

You'll work with managers and partners in a collaborative, flexible, hybrid environment, traveling up to 80% as needed, and contributing to deliverables, evidence collection, and client-facing documentation.