> Markdown version of [/jobs/ext/356471-sap-security-and-grc-consultant](https://www.wearedevelopers.com/jobs/ext/356471-sap-security-and-grc-consultant). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# SAP Security and GRC Consultant

- **Company:** Masento
- **Location:** UK
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Identity and Access Management, SAP ERP, Open Data Protocol, SAP (Applications), SAP NetWeaver Business Warehouse, SAP GRC, SAP Implementation, SAP Project System, SAP Security, Sap Fiori, SAP S/4HANA
- **Published:** June 24, 2026
- **Apply:** https://www.masentogroup.com/job/sap-security-and-grc-consultant-offshore-india

## About the Role

We are looking for an experienced SAP Security and GRC Consultant with 7+ years of hands-on experience in SAP Security, SAP GRC Access Control, user administration, role design, authorization troubleshooting, and compliance support. The candidate should have strong knowledge of SAP authorization concepts, Segregation of Duties, risk analysis, access request management., SAP Security:

 * Strong knowledge of SAP Security concepts including users, roles, profiles, authorization objects, and organizational level restrictions.
 * Experience with role design concepts such as single roles, composite roles, derived roles, and business roles.
 * Knowledge of SAP Fiori security, catalogs, groups, spaces, pages, and OData services is preferred.
 * Basic understanding of SAP S/4HANA security concepts.
 * Ability to analyze authorization issues and provide timely resolution.
 * Hands on experience on SAP Security transactions.

SAP GRC:

 * Experience in SAP GRC Access Control configuration and support.
 * Good understanding of SoD risks, mitigating controls, and remediation processes.
 * Configuration and support experience in SAP GRC Access Control.
 * User and role risk analysis using Access Risk Analysis.
 * Access request workflow support using Access Request Management.
 * Firefighter ID setup, assignment, log review, and reporting using Emergency Access Management.
 * Rule set understanding, risk maintenance, function maintenance, and mitigation control assignment.
 * Experience in generating and reviewing GRC reports.
 * Support for SoD remediation and mitigation activities.
 * Knowledge of MSMP workflow, BRFplus rules, connectors, and synchronization jobs is an advantage.

## Description

* Participate in SAP implementation, rollout, upgrade, and support projects.
 * Design, build, modify, and maintain SAP roles and authorizations based on business requirements.
 * Work on SAP security for ECC, S/4HANA, BW, Fiori, and other SAP systems as applicable.
 * Perform authorization troubleshooting using standard SAP transactions and traces.
 * Work with functional teams to understand access requirements and provide appropriate security solutions.
 * Maintain and update SAP security documentation, role matrices, access control documents, and audit evidence.
 * Support SAP GRC Access Control modules such as:
 + Access Risk Analysis
 + Access Request Management
 + Emergency Access Management
 + Business Role Management


## Related Videos

- [Headless by Design: Building Enterprise Systems That Agents Can Actually Use](https://www.wearedevelopers.com/videos/100092-headless-by-design-building-enterprise-systems-that-agents-can-actually-use)
- [Replacing Excel with SAP APIs & Python validation](https://www.wearedevelopers.com/videos/1944-replacing-excel-with-sap-apis-python-validation)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Full-stack role-based authorization in 45 minutes](https://www.wearedevelopers.com/videos/312-full-stack-role-based-authorization-in-45-minutes)

## Related Articles

- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Best Companies to Work For in Berlin: Top 14 Companies in 2023 ](https://www.wearedevelopers.com/magazine/188-best-companies-to-work-for-in-berlin-top-14-companies-in-2023)
- [Finding Jobs in Germany](https://www.wearedevelopers.com/magazine/375-finding-jobs-in-germany)
- [Best Coding Boot Camps in Germany](https://www.wearedevelopers.com/magazine/237-best-coding-boot-camps-in-germany)
- [Everything a Developer Needs to Know About MCP with Neo4j](https://www.wearedevelopers.com/magazine/604-everything-a-developer-needs-to-know-about-mcp-with-neo4j)
- [A Guide to Green Tech and Green IT Careers](https://www.wearedevelopers.com/magazine/374-a-guide-to-green-tech-and-green-it-careers)