SAP Consultant

We are seeking a skilled SAP GRC/SAP Security Specialist to join our IT team. The ideal candidate will be responsible for managing and maintaining SAP Governance, Risk, and Compliance (GRC) solutions and SAP Security frameworks to ensure the integrity, confidentiality, and availability of SAP systems. This role involves designing, implementing, and supporting SAP security policies, roles, and controls to mitigate risks and comply with regulatory requirements.

Key Responsibilities

• Design, implement, and maintain SAP GRC Access Control modules including Access Risk Analysis (ARA), Emergency Access Management (EAM), Access Request Management (ARM), and Business Role Management (BRM).

• Develop and manage SAP security roles and authorizations based on business requirements, ensuring segregation of duties (SoD) compliance and least privilege principles.

• Conduct regular SAP security audits, risk assessments, and compliance checks to identify vulnerabilities and recommend remediation actions.

• Collaborate with business and IT teams to define security policies, procedures, and standards aligned with organizational and regulatory requirements.

• Monitor and respond to SAP security incidents, including user access violations, unauthorized activities, and system vulnerabilities.

• Support SAP system upgrades, patches, and implementations with a focus on security impact analysis and role redesign.

• Provide training and guidance to end-users and stakeholders on SAP security best practices and GRC tools.

• Maintain documentation related to SAP security configurations, processes, and compliance reports.

• Liaise with internal and external auditors during SAP security audits and compliance reviews.

Required Qualifications

• Bachelor's degree in Information Technology, Computer Science, or related field.

• Proven experience (3+ years) in SAP Security and SAP GRC Access Control implementation and support.

• Strong knowledge of SAP security concepts, role design, user provisioning, and SoD principles.

• Hands-on experience with SAP GRC Access Control modules (ARA, EAM, ARM, BRM).

• Familiarity with SAP Basis and SAP system architecture is a plus.

• Understanding of regulatory frameworks such as SOX, GDPR, or HIPAA is advantageous.

• Excellent analytical, problem-solving, and communication skills.

• Ability to work independently and collaboratively in a fast-paced environment.