SAP Security Consultant

Position: Senior Consultant - SAP Application Security & GRC

Locations: Hyderabad | Bengaluru | Chennai | Pune

Experience: 4 to 18 Years

Employment Type: Full-time Contract

About the Role

As a Senior Consultant, you will support client engagements focused on enterprise Cyber risk, specifically addressing Application Security concerns and navigating security transformation journeys across the SAP ecosystem. You will serve as a subject matter expert in SAP Application Security and GRC Access Control, collaborating with cross-functional technical teams and client stakeholders.

Key Responsibilities

•

• Serve as a Subject Matter Expert (SME) in multiple domains of SAP Application Security, authorizations, and GRC Access Control.

•

• Lead and execute full lifecycle SAP S/4HANA or ECC security assessments, role design, implementation, and remediation exercises.

•

• Identify, manage, and mitigate potential access risks and Segregation of Duties (SoD) conflicts across complex client landscapes.

•

• Design, implement, and test SAP automated, manual, and application security controls.

•

• Play a lead role on client workstreams, including engagement planning, delivery management, and quality assurance.

•

• Drive continuous service improvement through regular technical reviews with internal and client leadership.

•

• Contribute to practice-level initiatives, proposal development (RFP support), and mentorship of junior consultants.

Mandatory Requirements

•

• 5 to 7 years of core, hands-on experience in SAP Security and SAP GRC 10.x / 12.x Access Control modules (ARA, ARM, EAM, BRM).

•

• Proven track record executing full-cycle SAP S/4HANA and/or ECC security design, authorization architecture, and role maintenance via PFCG and SU24.

•

• Deep technical and functional understanding of Segregation of Duties (SoD) frameworks, risk analysis, and compensating control design.

•

• Practical experience troubleshooting authorization issues using standard diagnostic tools (SU53, ST01, STAUTHTRACE).

•

• Strong project management, analytical, and structured client-facing communication skills.

Preferred Qualifications

•

• Hands-on security experience with SAP Fiori (business catalogs, target mapping, OData services, S_SERVICE, S_START).

•

• Exposure to multi-module security designs such as SAP BI, BW, SRM, CRM, SCM, MDG, or HR (structural authorizations).

•

• Familiarity with Internal Controls over Financial Reporting (ICFR), BPRC, or SOX ITGC audit procedures.

•

• Awareness of SAP Cloud extensions, SAP BTP security concepts, or SAP Analytics Cloud (SAC).

•

• Professional certifications: CISA, CISM, or CISSP.

•

• Prior experience within Big 4 or top-tier management consulting environments.