Sap grc & security - iag

Your work profile

Lead SAP IAG security discovery workshops with business, IT, and security stakeholders to understand access requirements, organizational structures, and governance processes. Design and implement SAP IAG security solutions for SAP S/4 HANA Cloud and hybrid SAP landscapes. Define and configure business roles, business role templates, access assignments, and role ownership models aligned with business and security requirements. Translate business and compliance requirements into appropriate role design, access controls, and approval workflows. Configure and manage SAP IAG access request, approval, provisioning, and access review processes. Design and maintain Segregation of Duties (So D) and critical access controls, including risk analysis and mitigation processes. Perform access risk analysis and investigate access violations, false positives, and authorization-related issues. Support integration of SAP IAG with SAP S/4 HANA Cloud, SAP IAS, SAP IPS, SAP Success Factors, and other SAP/cloud applications. Support hybrid IAM scenarios involving SAP IAG and SAP GRC Access Control, including integration, synchronization, and governance processes. Define role naming conventions, ownership models, access request processes, and security governance standards. Work with Business Process Owners and functional teams to identify appropriate business roles and organizational restrictions. Support user lifecycle and access provisioning activities, including joiner, mover, and leaver processes. Troubleshoot authorization, provisioning, synchronization, and access-related issues across integrated SAP systems. Support testing activities including unit testing, SIT, UAT, regression testing, and security validation. Prepare security design documents, role matrices, process flows, test scenarios, and operational procedures. Lead project activities, manage stakeholders, mentor junior consultants, and support project delivery and financial management.

Key skills required

Experience in SAP Security with strong hands-on experience in SAP Identity Access Governance (IAG) and cloud-based SAP security. Experience in SAP S/4 HANA Cloud, particularly SAP S/4 HANA Cloud Public Edition, and understanding of its business role and authorization concepts. Strong understanding of SAP IAG architecture, configuration, administration, and access governance capabilities. Experience designing and managing business roles, business role templates, access assignments, role owners, and approval workflows in SAP IAG. Strong understanding of SAP authorization concepts, authorization objects, organizational fields, restrictions, and least-privilege access. Experience with So D and Critical Access Risk Analysis, risk rule configuration, risk remediation, and mitigation. Knowledge of SAP Cloud Identity Services – Identity Authentication (IAS) and Identity Provisioning (IPS) and their role in SAP identity and access management. Experience with SAP IAG integration with S/4 HANA Cloud and other SAP applications. Knowledge of SAP Success Factors integration and hybrid IAG scenarios, including identity synchronization and provisioning. Understanding of SAP GRC Access Control and experience supporting IAG–GRC hybrid landscapes. Ability to analyze business processes and translate them into appropriate business roles and access restrictions. Experience in troubleshooting authorization, provisioning, synchronization, and access-related issues. Understanding of SAP security governance, access certification, periodic access reviews, and compliance requirements. Ability to lead security workshops and communicate effectively with business stakeholders, process owners, architects, and technical teams. Proficient in leading a team, managing delivery activities, and supporting project financials. Ability to communicate clearly and effectively in a timely manner.

Required Skills

Education – Any graduate. Strong experience in SAP IAG / SAP Cloud Security. Experience with SAP S/4 HANA Cloud Public Edition, Business Roles, and Fiori security. Hands-on experience with SAP IAG access requests, role management, access analysis, So D, and access reviews. Knowledge of SAP IAS, IPS, and SAP Cloud Identity Services. Experience with SAP IAG and GRC integration/hybrid security scenarios. Understanding of SAP Success Factors and identity provisioning/integration concepts. Strong knowledge of SAP authorization and role design principles. Excellent communication and stakeholder management skills. Strong analytical and problem-solving abilities. Ability to work collaboratively with clients, functional teams, architects, and internal security teams.