SAP Security & GRC Analyst

Key Responsibilities Include

• Support the end-to-end lifecycle of SAP user access, including user administration, role assignments, modifications, provisioning, de-provisioning, and access termination.
• Design, build, modify, and maintain single, composite, and derived roles using PFCG, following role-design standards and least-privilege principles.
• Analyze and troubleshoot SAP authorization issues using SU53, SUIM, ST01, STAUTHTRACE, and other relevant security tools.
• Support SAP GRC Access Control, including Access Risk Analysis (ARA), Access Request Management (ARM), Emergency Access Management (EAM/Firefighter), and Business Role Management (BRM).
• Perform Segregation of Duties (SoD) and critical/sensitive access risk analysis, and work with business and control owners on remediation and mitigation.
• Maintain and support GRC rulesets, mitigating controls, Firefighter assignments, workflows, and access-control processes.
• Support periodic user access reviews, role reviews, privileged-access reviews, and access certification activities.
• Support SAP S/4HANA and Fiori Security, including business roles, catalogs, spaces/pages, OData services, and associated backend authorization requirements.
• Support SAP BTP Security, including user and role administration, role collections, application authorizations, subaccount access, trust configuration, and integration with enterprise identity providers.
• Assist with security configuration and troubleshooting involving SAP Cloud Identity Services (IAS/IPS) and authentication/federation technologies such as SAML and OIDC, where applicable.
• Support SAP Solution Manager Change Request Management (ChaRM) processes, including ChaRM-related user access, security roles, authorization troubleshooting, transport/change-management workflows, and appropriate segregation of responsibilities across the change lifecycle.
• Understand the security and compliance requirements associated with SAP transports and change management, including separation of development, approval, testing, and production deployment responsibilities.
• Participate in SAP projects, enhancements, upgrades, migrations, and releases by performing security design, role changes, impact assessments, security testing, and access validation.
• Assist internal and external auditors with access-related evidence, control testing, change-management controls, and remediation of audit findings.
• Maintain security documentation, including role matrices, authorization standards, access procedures, GRC configurations, rulesets, mitigation controls, and security design documentation.
• Manage incidents, service requests, and access-related tickets using ServiceNow or comparable ITSM platforms, ensuring adherence to established SLAs.
• Collaborate effectively with geographically distributed business and technology teams, with flexibility to work morning or evening working hours as required to support regular collaboration across time zones. Evening work may extend up to 11:00pm IST.

Required Skills & Experience

• Typically 3–5 years of hands-on SAP Security and SAP GRC experience within an enterprise SAP environment.
• Strong understanding of SAP authorization concepts, Role-Based Access Control (RBAC), PFCG role design, authorization objects, profiles, and user administration.
• Hands-on experience with SAP GRC Access Control 10.x/12.x, particularly ARA, ARM, EAM/Firefighter, and BRM.
• Practical experience supporting SAP S/4HANA, Fiori Security, B4HANA, GRC, SLT, PI.
• Working knowledge of SAP BTP Security.
• Working knowledge of SAP Solution Manager and ChaRM, particularly security, authorization, transport/change-management workflows, and access-control considerations.
• Strong understanding of SoD, sensitive/critical access, privileged access, least privilege, and mitigating controls.
• Experience troubleshooting complex SAP authorization and access issues.
• Familiarity with access provisioning/de-provisioning, periodic access reviews, identity lifecycle management, and access governance processes.
• Experience with ServiceNow or similar ITSM/ticketing platforms.
• Strong analytical, troubleshooting, documentation, and communication skills.
• Ability to effectively collaborate with technical teams, business stakeholders, control owners, security teams, and auditors.
• Please note that this role is based in India. In order to enable us to meet statutory and regulatory obligations of the Indian immigration system you must have the appropriate immigration permission needed to work and reside in India for the duration of the employment.

Good to Have