SAP Security Consultant - Hybrid Role

Key Responsibilities

• SAP Security Design, build, and maintain SAP roles and authorizations across S/4HANA on Premise.
• Manage user provisioning, role assignments, and access remediation.
• Perform security impact analysis for new projects, transports, and functional changes.
• Support security patching, vulnerability remediation, and audit readiness.
• Monitor and troubleshoot authorization failures, SU53/SUIM analysis, and STAUTHTRACE.
• Ensure compliance with ITAR, DFARS 252.204 7012, CMMC, and organizational security policies.
• SAP GRC Administer and enhance SAP GRC Access Control (ARA, ARM, BRM, EAM).
• Maintain Segregation of Duties (SoD) rulesets and risk matrices.
• Manage Emergency Access Management (Firefighter) setup, logs, and reviews.
• Support Access Request workflows, role approval processes, and automated provisioning.
• Conduct periodic access reviews, SoD remediation, and compliance reporting.
• Partner with Internal Audit to support SOX controls, evidence collection, and audit walkthroughs.

Governance, Risk & Compliance

• Develop and maintain security standards, procedures, and documentation.
• Participate in risk assessments, control testing, and remediation planning.
• Support change management processes to ensure secure transport and deployment practices.
• Collaborate with cybersecurity teams on Zero Trust, MFA, VPN, and identity governance initiatives.