SAP S/4HANA Security Consultant

Key Responsibilities

• Design, develop, and implement SAP S/4HANA Fiori Security Roles across functional areas including Sales & Distribution (SD), Materials Management (MM), Finance (FI), General Ledger (GL), Accounts Payable (AP), Accounts Receivable (AR), Asset Accounting (AA).
• Support SAP Security Administration activities, including Authorization object configuration, Single, Composite, Master, and Derived role design and maintenance, User and role provisioning.
• Troubleshoot authorization and security issues using STAUTH, TRACE, USERTRACE, SU53, ST01.
• Implement and support SAP GRC Access Control 12.0 modules: Access Risk Analysis (ARA), Access Request Management (ARM), Emergency Access Management (EAM), Business Role Management (BRM).
• Administer SAP GRC configurations, including Rule sets, Workflows, Approver assignments, User provisioning, Emergency access processes, Access recertification.
• Maintain GRC master data and perform Risk analysis, Compliance monitoring, Audit support activities.
• Build and maintain MSMP workflows and configure GRC email notifications.
• Develop and maintain custom GRC rule sets, including Custom functions, Risk definitions, Segregation of Duties (SoD) controls, Rule-set enhancements aligned with business requirements.
• Plan, coordinate, and execute SAP GRC upgrade activities.
• Configure and support synchronization jobs, including Repository Sync, Authorization Sync, Firefighter Log Sync, Action Usage Sync.
• Investigate and resolve access request issues through audit log analysis and troubleshooting.
• Collaborate closely with application security teams to support enterprise-wide SAP security initiatives.
• Participate in 24x7 production support and on-call rotations as required.

Required Experience

• Minimum 7+ years of SAP Security experience.
• At least two full lifecycle SAP implementations.
• Hands-on experience implementing Fiori Security Roles for: S/4HANA SDMMFIGLAPARAA.
• Strong understanding of SAP Fiori security architecture, including Backend authorization concepts, OData service activation and authorization assignment, Front-end and back-end security integration.
• Experience configuring and supporting: SAP GRC Access Control, SAP GRC Process Control, SAP Identity Access Governance (IAG).

Required Skills

• SAP Security
• SAP S/4HANA Security
• SAP Fiori Security
• SAP GRC Access Control 12.0
• SAP HANA
• Role Design & Administration
• MSMP Workflow Configuration
• Risk Analysis & Compliance
• Authorization Troubleshooting
• OData Security Configuration