SAP Security Consultant

Design and maintain role concepts for S/4HANA (Business Roles, Catalogs, Groups) Perform user administration, role provisioning, and access reviews Conduct authorization troubleshooting (SU53, STAUTHTRACE) Support system conversions and upgrades (S/4) Implement best-practice authorization concepts (Fiori-first, business role-based) SAP Fiori Security Configure and maintain Fiori catalogs, groups, spaces, and pages Manage OData service authorizations Integrate Fiori security with Back End S/4 authorizations Support Fiori launchpad security and performance issues SAP GRC (Access Control)

Implement and support GRC AC modules: o Access Risk Analysis (ARA) o Access Request Management (ARM) o Emergency Access Management (EAM/Firefighter) o Business Role Management (BRM) Maintain SoD rule sets, mitigating controls, and workflows Support audit and compliance requirements (SOX, GDPR, internal audits) Coordinate with auditors and compliance teams Configure GRC for SuccessFactors and ARIBA systems SAP BTP Security Configure BTP security architecture (Global Account, Subaccounts) Manage Role Collections, authorization assignments, and trust configurations Integrate BTP with IAS/IPS and corporate IdPs (Azure AD, etc.) Secure BTP services (CAP, Integration Suite, Workflow, BAS) Support secure integration between S/4HANA and BTP applications Identity & Access Management Integrate SAP systems with SSO, SAML, OAuth 2.0 Support Identity life cycle management Enforce least-privilege and zero-trust security principles Operations & Support Provide L3 security support Perform regular access reviews and cleanups activities Document security designs,SOPs, and controls Support cutovers, change transport management, and production go-lives

Technical Skills Strong experience in SAP Security (ECC and S/4HANA) Hands-on expertise with SAP Fiori authorization concepts Solid working knowledge of SAP GRC Access Control Experience with SAP BTP security and cloud IAM Strong knowledge of authorization objects, roles, profiles Familiarity with SAP Basis and integration concepts Functional & Compliance Knowledge Understanding of SoD, audit controls, and compliance frameworks Experience working with internal/external auditors Ability to translate business requirements into secure role designs Experience in SAP BDC, Datasphere, SAP Analytics Cloud and SAP SuccessFactors are desired.