SAP GRC AC Consultant

JD 3: SAP GRC AC

Hands-on SAP GRC Access Control Consultant to support, enhance and operate the enterprise access governance landscape. The role will configure and support SAP GRC Access Control capabilities across Access Request Management, Access Risk Analysis, Emergency Access Management and Business Role Management.

You will work with SAP Security, business stakeholders, role owners, Risk, Compliance, Internal Audit and technical teams to deliver secure, compliant and auditable access processes across SAP and integrated applications.

What you will be doing (Role Accountabilities)

•             Configure and enhance SAP GRC Access Control 10.1/12.0 capabilities across ARM, ARA, EAM and BRM.

•             Support access request workflows from requirement analysis through configuration, testing, deployment and post-production support.

•             Configure and troubleshoot MSMP workflows, BRF+ rules, agent determination, path selection, notifications and escalation behaviour.

•             Perform Segregation of Duties and sensitive-access risk analysis at user, role, profile and request level.

•             Support risk remediation, mitigating control assignment, control monitoring and evidence preparation.

•             Administer Emergency Access Management, including Firefighter IDs, owners, controllers, logs and review workflows.

•             Support business-role creation, maintenance, import, approval and reconciliation processes within BRM.

•             Monitor connectors, sync jobs, provisioning, repository objects and scheduled background jobs.

•             Investigate incidents and service requests, perform root-cause analysis and implement sustainable fixes within agreed service levels.

•             Support SAP ECC, S/4HANA and Fiori access-governance requirements, including role and authorisation dependencies.

•             Coordinate transports across development, test and production environments, including pre-deployment checks and post-implementation validation.

•             Prepare operational reports, audit evidence, SOPs, runbooks, knowledge-transfer material and configuration documentation.

•             Contribute to continuous improvement and automation of access requests, review, compliance and reporting processes.

•             Work as an effective team member, communicate progress clearly and raise risks or dependencies promptly.

What you’ll need to succeed (Skills & Experience)

•             4-6 years of overall experience in SAP Security and/or SAP GRC, with at least 3 years of relevant         hands-on  SAP GRC Access Control experience.

•             Practical experience in at least three SAP GRC Access Control modules: ARM, ARA, EAM and BRM.

•             Hands-on knowledge of MSMP workflow configuration and BRF+ rules.

•             Strong understanding of SoD, sensitive access, risk analysis, mitigation and access governance concepts.

•             Working knowledge of SAP role design, user administration, authorisation objects, SU24 concepts and security troubleshooting.

•             Experience supporting SAP ECC or S/4HANA environments; exposure to Fiori security is desirable.

•             Ability to analyse production issues, document root cause and coordinate fixes across functional and technical teams.

•             Ability to work with business users, auditors and technical stakeholders.

•             Understanding of ITGC, audit evidence, change control and controlled production-support practices.