Cyber - Sap Security and Grc Access & Process Control Manager

Deloitte Deloitte · Consulting

This role is for a Cyber - SAP Security and GRC Access & Process Control Manager at Deloitte. The primary focus is on managing SAP security and governance, risk, and compliance requirements, including leading assessments, designing and implementing security roles, and configuring SAP GRC Access Control capabilities. The role involves project management, client stakeholder management, and delivery team leadership within complex SAP environments.

What you'd actually do

  1. Lead SAP ECC and SAP S/4HANA security assessments, design, and implementation activities across complex business and technology environments
  2. Design, build, test, and deploy end-user and IT support security roles across SAP platforms, including Fiori, Ariba, Integrated Business Planning, Business Technology Platform, and Business Data Cloud
  3. Configure and implement SAP GRC Access Control capabilities, including Access Risk Analysis, Access Request Management, Emergency Access Management, and Business Role Management
  4. Support SAP GRC Process Control design and configuration, including controls, risks, subprocesses, organizations, assignments, and continuous control monitoring capabilities
  5. Manage project workstreams, client stakeholders, and delivery teams while providing recommendations on SAP security role design, segregation of duties, vulnerability findings, and regulatory control requirements

Skills

Required

  • SAP S/4HANA security
  • SAP Governance, Risk, and Compliance (GRC) Access Control
  • SAP ECC security
  • Fiori security
  • Ariba security
  • Integrated Business Planning (IBP) security
  • Business Technology Platform (BTP) security
  • Business Data Cloud (BDC) security
  • SAP GRC Access Risk Analysis (ARA)
  • SAP GRC Access Request Management (ARM)
  • SAP GRC Emergency Access Management (EAM)
  • SAP GRC Business Role Management (BRM)
  • SAP GRC Process Control
  • Project management
  • Client stakeholder management
  • Delivery team leadership

Nice to have

  • Previous consulting experience
  • Certified Information Systems Security Professional (CISSP)
  • Certified Information Security Manager (CISM)
  • Certified Information Systems Auditor (CISA)
  • SAP identity and access governance
  • Cloud security
  • Cloud migrations
  • SAP business process controls
  • Data protection tools
  • NextLabs
  • Vulnerability management tools
  • Onapsis

What the JD emphasized

  • 8+ years of experience with SAP S/4HANA security and SAP Governance, Risk, and Compliance (GRC) Access Control
  • 8+ years of hands-on experience implementing security for SAP S/4HANA, Fiori, Ariba, Integrated Business Planning (IBP), Business Technology Platform (BTP), and Business Data Cloud (BDC), including requirement gathering, security design, and deployment
  • Demonstrated delivery of 3+ full-cycle SAP GRC Access Control implementation projects, SAP S/4HANA security implementations, and 2+ SAP GRC Process Control implementations
  • 5+ years of experience designing, configuring, and implementing SAP GRC Access Risk Analysis (ARA), Access Request Management (ARM), Emergency Access Management (EAM), and Business Role Management (BRM)