Cyber - Sap Security and Grc Access & Process Control Consultant

Deloitte Deloitte · Consulting

This role focuses on implementing and assessing SAP S/4 HANA security and GRC Access Control, including end-user security, role design, SOD ruleset configuration, and workflow management. It involves gathering requirements, designing solutions, and deploying security for SAP reporting and analytics.

What you'd actually do

  1. As a Consultant, you will be part of our SAP practice and will be responsible for delivering SAP ECC and S/4 HANA security implementations and assessments.
  2. Responsibilities will include assessment, design and implementation of end user security, and/or SAP GRC 10.x/12.0 Access Control.
  3. 1+ years of experience in supporting security design workshops and designing, building, testing, and deploying business end user and IT support roles with In-depth knowledge on Fiori applications, Spaces and Pages concepts
  4. 2+ years of experience in designing, configuring and implementing SAP GRC Access Request Analysis (ARA), Access Request Management (ARM), Emergency Access Management (EAM), and Business Role Management (BRM)
  5. 2+ years of experience in building and updating Segregation of Duties (SOD) ruleset, configuring ruleset in SAP GRC 12.0 systems and performing SOD risk analysis at user and role level

Skills

Required

  • SAP S/4 HANA Security
  • SAP GRC 10.x/12.0 Access Control
  • SAP ECC security
  • Fiori applications
  • SAP reporting and analytics security
  • SAP Business Objects
  • SAP BDC
  • SAP Cloud Analytics
  • BW/4HANA
  • Segregation of Duties (SOD) ruleset configuration
  • SAP GRC Access Request Analysis (ARA)
  • Access Request Management (ARM)
  • Emergency Access Management (EAM)
  • Business Role Management (BRM)
  • GRC AC request workflows
  • vulnerability scans

Nice to have

  • CISSP
  • CISM
  • CISA
  • SAP identity and access governance (IAG)
  • cloud security
  • cloud migrations
  • Onapsis

What the JD emphasized

  • 3+ years of experience with SAP S/4 HANA Security and GRC Access Control
  • Demonstrated delivery of at least two full cycle SAP S/4 HANA security implementations
  • 3+ years of hands-on experience implementing security for SAP S/4 HANA, Fiori, BTP security including requirement gathering, security design and deployment
  • 2+ years of experience in designing, configuring and implementing SAP GRC Access Request Analysis (ARA), Access Request Management (ARM), Emergency Access Management (EAM), and Business Role Management (BRM)
  • 2+ years of experience in building and updating Segregation of Duties (SOD) ruleset, configuring ruleset in SAP GRC 12.0 systems and performing SOD risk analysis at user and role level