> Markdown version of [/jobs/ext/1495504-sap-security-grc-consultant-senior-manager](https://www.wearedevelopers.com/jobs/ext/1495504-sap-security-grc-consultant-senior-manager). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # SAP Security & GRC Consultant - Senior Manager - **Company:** PwC - **Location:** London, UK - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** SAP Cloud, Artificial Intelligence, Cyber Security, Identity and Access Management, SAP ERP, SAP (Applications), SAP Business Suiteing, SAP GRC, SAP Security, SAPBasis, SAP S/4HANA - **Published:** July 30, 2026 - **Apply:** https://uk.indeed.com/viewjob?jk=ed4016dac1a6b7cc ## About the Role * You have successfully led SAP Security & GRC workstreams across multiple end-to-end SAP ECC or SAP S/4HANA transformation programmes. * You have deep expertise in SAP Security, Roles & Authorisations, Segregation of Duties (SoD), SAP GRC, SAP Cloud Identity Services and Identity & Access Management. * You understand SAP's latest security and governance capabilities, including SAP Cloud Identity Services, SAP GRC, SAP Business AI, Joule and clean-core principles. * You build trusted relationships with business, technology and risk stakeholders, helping organisations balance security, compliance and user experience. * You enjoy leading multidisciplinary teams and coordinating delivery across global capability centres and programme teams. * You have experience supporting business development through security assessments, discovery engagements, proposals and executive presentations. * You're passionate about helping clients establish secure, compliant and well-governed SAP environments that enable successful business transformation. * Eligible for Security clearance ## Description * Lead the SAP Security & GRC workstream across complex SAP S/4HANA transformation programmes, defining security, governance and controls strategies that enable secure, scalable and compliant business processes. * Design SAP security and GRC solutions covering roles and authorisations across the SAP landscape, Segregation of Duties (SoD), identity and access management, governance, compliance and controls, aligned to SAP best practice and clean-core principles. * Partner with business process, functional and technical teams to embed security and controls by design throughout solution definition, build, testing, deployment and business adoption. * Lead blended delivery teams across the UK and global delivery centres, collaborating with specialist risk and assurance teams where appropriate to deliver SAP Security & GRC capabilities at scale. * Help clients leverage SAP Business AI, Joule and intelligent automation to strengthen governance, improve control effectiveness and improve control effectiveness and automate security operations where appropriate. * Support strategic pursuits through security assessments, solution shaping, proposals and executive presentations, providing clients with confidence in our approach to SAP security and governance. * Coach consultants whilst helping shape the continued growth of PwC's SAP Security and Controls capability. ## Related Videos - [Headless by Design: Building Enterprise Systems That Agents Can Actually Use](https://www.wearedevelopers.com/videos/100092-headless-by-design-building-enterprise-systems-that-agents-can-actually-use) - [Organizational Change Through The Power Of Why - DevSecOps Enablement](https://www.wearedevelopers.com/videos/478-organizational-change-through-the-power-of-why-devsecops-enablement) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Best Companies to Work For in Berlin: Top 14 Companies in 2023 ](https://www.wearedevelopers.com/magazine/188-best-companies-to-work-for-in-berlin-top-14-companies-in-2023) - [Best Companies to work for in London: Top 25 Companies in 2023](https://www.wearedevelopers.com/magazine/187-best-companies-to-work-for-in-london-top-25-companies-in-2023) - [Best Companies to Work For in Germany: Top 25 Companies in 2023 ](https://www.wearedevelopers.com/magazine/33-best-companies-to-work-for-in-germany-top-25-companies-in-2023) - [What’s the Difference between a Junior, Mid, and Senior Developer?](https://www.wearedevelopers.com/magazine/238-what-s-the-difference-between-a-junior-mid-and-senior-developer) - [A Guide to Green Tech and Green IT Careers](https://www.wearedevelopers.com/magazine/374-a-guide-to-green-tech-and-green-it-careers)