SAP GRC & Security - IAG

Your work profile Lead SAP IAG security discovery workshops with business, IT, and security stakeholders to understand access requirements, organizational structures, and governance processes. Design and implement SAP IAG security solutions for SAP S/4HANA Cloud and hybrid SAP landscapes. Define and configure business roles, business role templates, access assignments, and role ownership models aligned with business and security requirements. Translate business and compliance requirements into appropriate role design, access controls, and approval workflows. Configure and manage SAP IAG access request, approval, provisioning, and access review processes. Design and maintain Segregation of Duties (SoD) and critical access controls, including risk analysis and mitigation processes. Perform access risk analysis and investigate access violations, false positives, and authorization-related issues. Support integration of SAP IAG with SAP S/4HANA Cloud, SAP IAS, SAP IPS, SAP SuccessFactors, and other SAP/cloud applications. Support hybrid IAM scenarios involving SAP IAG and SAP GRC Access Control, including integration, synchronization, and governance processes. Define role naming conventions, ownership models, access request processes, and security governance standards. Work with Business Process Owners and functional teams to identify appropriate business roles and organizational restrictions. Support user lifecycle and access provisioning activities, including joiner, mover, and leaver processes. Troubleshoot authorization, provisioning, synchronization, and access-related issues across integrated SAP systems. Support testing activities including unit testing, SIT, UAT, regression testing, and security validation. Prepare security design documents, role matrices, process flows, test scenarios, and operational procedures. Lead project activities, manage stakeholders, mentor junior consultants, and support project delivery and financial management. Key skills required Experience in SAP Security with strong hands-on experience in SAP Identity Access Governance (IAG) and cloud-based SAP security. Experience in SAP S/4HANA Cloud, particularly SAP S/4HANA Cloud Public Edition , and understanding of its business role and authorization concepts. Strong understanding of SAP IAG architecture, configuration, administration, and access governance capabilities . Experience designing and managing business roles, business role templates, access assignments, role owners, and approval workflows in SAP IAG. Strong understanding of SAP authorization concepts, authorization objects, organizational fields, restrictions, and least-privilege access . Experience with SoD and Critical Access Risk Analysis , risk rule configuration, risk remediation, and mitigation. Knowledge of SAP Cloud Identity Services – Identity Authentication (IAS) and Identity Provisioning (IPS) and their role in SAP identity and access management. Experience with SAP IAG integration with S/4HANA Cloud and other SAP applications . Knowledge of SAP SuccessFactors integration and hybrid IAG scenarios , including identity synchronization and provisioning. Understanding of SAP GRC Access Control and experience supporting IAG–GRC hybrid landscapes . Ability to analyze business processes and translate them into appropriate business roles and access restrictions . Experience in troubleshooting authorization, provisioning, synchronization, and access-related issues. Understanding of SAP security governance, access certification, periodic access reviews, and compliance requirements. Ability to lead security workshops and communicate effectively with business stakeholders, process owners, architects, and technical teams. Proficient in leading a team, managing delivery activities, and supporting project financials. Ability to communicate clearly and effectively in a timely manner. Required Skills Education – Any graduate. Strong experience in SAP IAG / SAP Cloud Security . Experience with SAP S/4HANA Cloud Public Edition, Business Roles, and Fiori security . Hands-on experience with SAP IAG access requests, role management, access analysis, SoD, and access reviews . Knowledge of SAP IAS, IPS, and SAP Cloud Identity Services . Experience with SAP IAG and GRC integration/hybrid security scenarios . Understanding of SAP SuccessFactors and identity provisioning/integration concepts. Strong knowledge of SAP authorization and role design principles. Excellent communication and stakeholder management skills. Strong analytical and problem-solving abilities. Ability to work collaboratively with clients, functional teams, architects, and internal security teams.