Lead Consultant(Development)

Job Summary

We are seeking an experienced SAP Security & Identity Access Governance (IAG) Consultant with 8-9 years of experience in SAP Security, GRC, and SAP Cloud Identity Access Governance solutions. The ideal candidate should have strong expertise in SAP authorization concepts, role design, risk analysis, SoD (Segregation of Duties), user provisioning, and compliance processes across SAP landscapes.

Key Responsibilities

SAP Security Administration

• Design, build, and maintain SAP roles and authorizations across SAP systems.
• Perform user administration activities including user creation, modification, locking/unlocking, and access reviews.
• Conduct security analysis and troubleshoot authorization issues.
• Support SAP ECC, S/4HANA, BW, CRM, SRM, Fiori, and SAP BTP environments.

SAP IAG (Identity Access Governance)

• Implement and support SAP Cloud Identity Access Governance (IAG).
• Configure Access Request Management (ARM), Access Risk Analysis (ARA), and Role Design functionalities.
• Integrate SAP IAG with SAP IAS, IPS, S/4HANA, SuccessFactors, Ariba, and third-party applications.
• Manage user provisioning and deprovisioning workflows.
• Support emergency access and access certification processes.

SAP GRC & Compliance

• Perform Segregation of Duties (SoD) risk analysis and mitigation controls.
• Ensure compliance with audit and regulatory requirements.
• Collaborate with Internal Audit, Compliance, and Business teams during audits.
• Maintain risk rulesets and monitor critical access risks.

Security Governance

• Review and optimize role designs based on least-privilege principles.
• Conduct periodic access reviews and user recertification activities.
• Develop and maintain security documentation, procedures, and SOPs.
• Participate in security transformation and migration projects.

Skill Requirements

Technical Skills

• Strong expertise in SAP Security and Authorization concepts.
• Hands-on experience with SAP IAG implementation and support.
• SAP GRC Access Control knowledge.
• Experience in:
• SAP S/4HANA Security
• SAP Fiori Security
• SAP ECC Security
• SAP BTP Security
• SAP IAS & IPS
• SU01, PFCG, SU24, SU53, ST01
• Role Design and User Administration

Functional Knowledge

• Understanding of Finance, Procurement, Sales, and HR business processes.
• Knowledge of Segregation of Duties (SoD) and audit controls.

• Experience with SAP S/4HANA transformation projects.

Soft Skills

• Strong communication and stakeholder management skills.
• Analytical and problem-solving abilities.
• Ability to work independently and within global teams.
• Experience interacting with auditors and compliance teams.

Nice to Have

• SAP SuccessFactors Security.
• SAP Ariba Security.
• SAP Business Technology Platform (BTP) Security.
• Experience with Identity Management (IDM), SailPoint, or Azure AD integrations.

Other Requirements