SAP GRC/Security Consultant (8-12 yrs)

Job Description :

- At least 8 to 12 years of S/4HANA Security & GRC Access Control and several years of project experience as SAP Consulting

- The SAP Security Architect/Consultant will be responsible for the overall design and approach to SAP security across all of our client's SAP systems, including development, BAU, handover and support (full life cycle of project).

- The successful applicant must be an SAP Security expert with direct experience of GRC, IDM, S4HANA, Fiori, MDG. Build of roles & authorizations including identifying the relevant authorization objects. Must have experience in role building related to Fiori Spaces & Pages.

- Has participated in at least one large information transformation engagements within SAP Security

- Extensive experience of SAP GRC v 10.01 Access Control with hands on experience of Segregation of Duties including SAP GRC rule set

- Working and business knowledge of SAP IdM; user management, integration and workflow, preferably with SQL and Java experience.

- Own the Authorisations/GRC design and strategy (system connectivity for GRC, Access Control, reporting, naming conventions etc.)

- SAP roles and authorisations experience; including at least two full SAP project life cycles implementing an SAP authorisation concept.

- Excellent client facing skills

- Excellent hands on working knowledge of SAP roles and authorisations in both end user and project environment and in the following SAP modules: Solution Manager, ERP, S/4HANA, MDG, GRC, IdM and Fiori.

- Able to work with functional consultants to refine roles and authorisations to the granular level of authorisation object.

- Working knowledge of segregation of duties within an SAP environment and able to design and build SAP roles accordingly.

- Experience with how roles and authorisations work with Fiori. Experience of creating security concept in a SAP Fiori environment; knowledge Fiori catalogues and Fiori groups and how they are used to build authorisation roles is essential.

- Knowledge of SAP GRC Business Role Manage (BRM) and how it relates to the profile generator (PFCG).

- Working knowledge of authorisation reporting and troubleshooting transaction codes / tools including SE16, SU22, SU24, S25, SU53, SU56, ST01, SUIM, PFCG and reporting.

- Carry out testing and create/maintain test scripts