SAP GRC consultant

We are seeking an experienced SAP GRC Access Control Specialist with SAP S/4HANA expertise to design, configure, and maintain our access governance, emergency access, and Segregation of Duties (SoD) framework. In this role, you will be responsible for end-to-end MSMP workflow design, Emergency Access Management (EAM), User Access Reviews (UAR), continuous risk analysis, and adapting GRC rules/workflows to support our S/4HANA and Fiori environment., S/4HANA Access Governance: Adapt and optimize GRC Access Control rules, SoD risk matrices, and workflows specifically for SAP S/4HANA, including Fiori catalogs, target mappings, business roles, and S/4-specific authorization objects. * Connector & Infrastructure Management: Setup, Maintain and troubleshoot GRC AC connectors to S/4HANA and other target systems.

SAP GRC Access Control Configuration & Operations * MSMP Workflow Setup: Design, configure, and maintain Multi-Stage Multi-Path (MSMP) workflows for Access Risk Management (ARM), custom path routing, agent definitions, notification templates, and BRFplus decision rules. * Emergency Access Management (EAM): Configure and manage Firefighter IDs (FFIDs), Firefighter roles, owners, controllers, reason codes, and automated EAM log review workflows across S/4HANA environments. * Access Reviews & Certifications: Plan, launch, and manage periodic User Access Reviews (UAR) and SoD Role Re-certifications, streamlining manager and process owner approval workflows. * Risk Analysis & Remediation (ARA): Configure Segregation of Duties (SoD) and Sensitive Access risk matrices for S/4HANA business processes, run risk analysis reports, and manage mitigating controls/assignments. * Audit & Compliance Support: Audit Firefighter usage, log reviews, and access request approvals to ensure strict compliance with SOX and internal audit standards.

SAP S/4HANA Experience (Required): Proven hands-on experience configuring GRC Access Control specifically within an SAP S/4HANA ecosystem, including deep knowledge of S/4HANA security concepts, Fiori tile/launchpad security, and updating GRC rule sets for S/4 processes. * SAP GRC Access Control Expertise: Deep functional and technical hands-on experience in SAP GRC AC 12.0 covering ARA, ARM, EAM, and BRM modules. * MSMP & BRF+ Rule Engine: Strong proficiency in configuring MSMP workflows, defining custom stages, paths, notification templates, and maintaining BRFplus decision tables/rules. * EAM / FFID Governance: Solid experience setting up Firefighter IDs, controller assignments, notification alerts, and auditing EAM log reviews in S/4HANA. * Access Review Administration: Proven capability in running UAR campaigns, tracking completion, and enforcing access revocation/remediation.

Preferred / Nice-to-Have Skills * IAM Integration: Experience integrating GRC AC with enterprise Identity & Access Management systems (e.g., Azure AD, SailPoint, Okta). * Certification: SAP Certified Application Associate SAP Access Control / SAP Security.

Soft Skills * High attention to detail regarding security compliance, risk mitigation, and audit trails. * Strong communication skills to train Firefighter owners, controllers, and business approvers. * Collaborative mindset to work closely with IT, Internal Audit, and Risk Management teams.

The Company offers the following benefits for this position, subject to applicable eligibility requirements: medical insurance, dental insurance, vision insurance, 401(k) retirement plan, life insurance, long-term disability insurance, short-term disability insurance, paid parking/public transportation, paid time off, paid sick and safe time, hours of paid vacation time, weeks of paid parental leave, and paid holidays annually as applicable.