SAP GRC Cyber Consultant

SAP GRC Cyber Consultant

Job Overview

We are looking for experienced SAP GRC Cyber Consultants with strong hands-on expertise in SAP Application Security, SAP GRC Access Control, SAP S/4HANA Security, and enterprise security controls.

The consultant will support clients in addressing SAP application security concerns, evaluating security risks, implementing access controls, and strengthening governance, risk, and compliance practices across SAP environments.

The ideal candidate should have experience in SAP Security assessments, role design, Segregation of Duties (SoD), SAP GRC implementations, and working with business and technical stakeholders.

Key Responsibilities

• Serve as a subject matter expert in SAP Application Security and SAP GRC Access Control.
  

• Support clients in identifying, evaluating, and addressing SAP application security risks.
  

• Perform security assessments, design, and implementations across SAP S/4HANA and ECC environments.
  

• Design, implement, and test SAP security roles and authorization controls.
  

• Provide recommendations on SAP security role design and implementation based on established practices.
  

• Analyze Segregation of Duties (SoD) conflicts and support the implementation of appropriate controls.
  

• Design, implement, and test automated, manual, security, and SoD controls.
  

• Support SAP GRC Access Control configuration and related security activities.
  

• Identify potential risks during client engagements and communicate concerns proactively.
  

• Collaborate with client stakeholders and internal teams to assess service delivery and identify improvements.
  

• Participate in project planning, management, quality assurance, and delivery activities.
  

• Take ownership of assigned project workstreams and contribute to successful project outcomes.
  

• Support proposal development and client discussions where required.
  

• Contribute to team development, knowledge sharing, and training activities.
  

• Work collaboratively with functional, technical, security, and business teams to maintain strong security and compliance standards.
  

Work Arrangement

• Locations: Bengaluru, Hyderabad, Chennai, or Pune
  

• Work Mode: Hybrid
  

• Office Attendance: 2 Days per Week
  

• Contract Duration: 6 Months
  

• Background Verification: Mandatory
  

• Shift Timing: Not specified
  

Requirements

Required Skills & Experience

• Minimum 4+ years of relevant experience as per the requirement, with 5–7 years of SAP Security and SAP GRC experience specified in the detailed JD.
  

• Strong hands-on experience with SAP Security and SAP GRC Access Control 10.x/12.x.
  

• Experience working with SAP S/4HANA and SAP ECC security environments.
  

• Hands-on experience in full-cycle SAP S/4HANA or ECC Security assessments, design, and implementations.
  

• Strong understanding of SAP security role design, authorizations, and access controls.
  

• Experience implementing SAP Security and Governance, Risk, and Compliance frameworks.
  

• Strong understanding of Segregation of Duties (SoD) principles and frameworks.
  

• Ability to design, implement, and test SAP automated, manual, security, and SoD controls.
  

• Knowledge of enterprise application security practices and SAP security risk management.
  

• Excellent written and verbal communication skills.
  

• Strong project management, organizational, and problem-solving skills.
  

• Ability to collaborate with stakeholders and contribute to project delivery and quality management.
  

Good-to-Have Skills

• SAP Fiori Security experience.
  

• Security experience across SAP BI, SRM, CRM, SCM, MDG, and HR modules.
  

• Experience working with Big 4 consulting organizations.
  

• Experience in client-facing consulting and project leadership activities.
  

• Exposure to SAP security advisory, risk assessments, and compliance improvement initiatives.
  

Preferred Certifications

• CISSP – Certified Information Systems Security Professional
  

• CISM – Certified Information Security Manager
  

• CISA – Certified Information Systems Auditor
  

These certifications are preferred and not mandatory.

Additional Requirements

• Willingness to work in a hybrid arrangement with 2 days per week in the office.
  

• Strong communication and stakeholder management capabilities.
  

• Ability to work independently and collaboratively across teams.
  

• Experience supporting SAP Security and GRC requirements in enterprise environments.