Noida, Uttar Pradesh
Job Summary
The Senior Product Specialist in SAP Security GRC Administration is responsible for overseeing the governance, risk, and compliance aspects of SAP security within the organization. The role involves ensuring the secure configuration and maintenance of SAP systems, access controls, and user authorization to protect critical business information and prevent unauthorized access.
Key Responsibilities
1. Implement and manage sap security grc solutions to ensure alignment with business requirements and compliance standards.
2. Develop and maintain access controls, user roles, and authorization management within sap systems.
3. Monitor and analyze sap security logs, assess risks, and implement corrective actions to mitigate potential threats.
4. Collaborate with cross functional teams to integrate security measures into sap solutions and enhance overall security posture.
5. Conduct regular security assessments, audits, and remediation activities to uphold sap security best practices.
6. Provide guidance and support to internal stakeholders on sap security policies, procedures, and processes.
Skill Requirements
12+ years of SAP Security and GRC experience with architecture-level exposure across SAP S/4HANA, Fiori, HANA DB, SAP GRC, SAP BTP, SAP SaaS products, RISE with SAP and cloud transformation programs. Candidate should be able to lead security architecture, governance, delivery teams and customer stakeholders. Core SAP Security Skills Define enterprise SAP Security architecture covering S/4HANA, ECC, Fiori, HANA DB, GRC, BTP, SaaS and hybrid cloud SAP landscapes. Lead security design for S/4HANA Greenfield, Brownfield, Selective Data Transition, RISE and cloud transformation projects. Define role architecture using business roles, technical roles, composite/single roles, Fiori catalogs, spaces, pages and launchpad authorization concepts. Provide expert-level authorization analysis, troubleshooting and security remediation across SAP landscapes. Govern HANA database security including users, roles, privileges, schemas and database-level security controls. Define security testing strategy, cutover security plan, defect management approach and go-live/hypercare support model. Define audit evidence, access review, compliance reporting and control validation approach for large programs. Provide architecture guidance for security impacts during SAP upgrades, migrations, conversions and RISE transformation initiatives. Additional Skills – GRC, Access Review, Testing, Migration, SaaS and BTP Architect SAP Security solutions for S/4HANA, SAP Public Cloud, SAP Private Cloud, RISE with SAP and hyperscaler-hosted SAP environments. Lead SAP Security workstreams for ECC to S/4HANA conversion, upgrades, cloud migration and transformation programs. Lead SAP BTP security design including global account/subaccount security model, role collections, IAS, IPS, identity provider integration and authorization governance. Define SaaS access governance and identity integration model for SAP products such as SuccessFactors, Ariba, Concur, Fieldglass, SAC, Datasphere, IBP and Integration Suite. Lead implementation, configuration and governance of SAP GRC Access Control modules including ARA, ARM, EAM, BRM and UAR. Define SoD rulesets, mitigating controls, risk remediation strategy, access review processes and emergency access governance. Lead GRC Process Control implementation including control framework, assessments, compliance monitoring and control testing. Drive periodic access certifications, user access reviews, control testing, audit readiness and compliance remediation. Lead internal and external audit engagements, evidence collection, control validation, issue remediation and management reporting. Assess security risks and provide recommendations for standardization, automation, continuous control monitoring and compliance improvement. Architect Exposure Own SAP Security and GRC solution architecture across large transformation engagements. Lead architecture workshops, governance meetings, security design reviews, audit reviews and executive stakeholder discussions. Manage security delivery teams, mentor consultants and provide technical leadership across multiple workstreams. Support RFPs, solution proposals, effort estimation, resource planning and client solution defense. Define reusable security templates, role design standards, access governance playbooks, testing approach, audit evidence packs and operational SOPs. Drive security standardization, automation, compliance improvement and continuous control monitoring initiatives. Good to Have RISE with SAP security architecture and operating model experience. SAP Public Cloud and SAP Private Cloud security design experience. SAP GRC Process Control implementation experience. Advanced BTP security, IAS/IPS, identity federation, OAuth, SAML, SCIM and cloud identity governance exposure. HANA DB security architecture and database audit controls. Security automation,
Other Requirements
1.SAP Certified Technology Associate SAP Authorization and Auditing for SAP NetWeaver (if applicable)
#body.unify div.unify-button-container .unify-apply-now: focus, #body.unify div.unify-button-container .unify-apply-#body.unify div.unify-button-container .unify-apply-now: focus, #body.unify div.unify-button-container .unify-apply-
