SAP GRC & Security - IAG

Deloitte · Bangalore district, India

Your work profile

• Lead SAP IAG security discovery workshops with business, IT, and security stakeholders to understand access requirements, organizational structures, and governance processes.
• Design and implement SAP IAG security solutions for SAP S/4HANA Cloud and hybrid SAP landscapes.
• Define and configure business roles, business role templates, access assignments, and role ownership models aligned with business and security requirements.
• Translate business and compliance requirements into appropriate role design, access controls, and approval workflows.
• Configure and manage SAP IAG access request, approval, provisioning, and access review processes.
• Design and maintain Segregation of Duties (SoD) and critical access controls, including risk analysis and mitigation processes.
• Perform access risk analysis and investigate access violations, false positives, and authorization-related issues.
• Support integration of SAP IAG with SAP S/4HANA Cloud, SAP IAS, SAP IPS, SAP SuccessFactors, and other SAP/cloud applications.
• Support hybrid IAM scenarios involving SAP IAG and SAP GRC Access Control, including integration, synchronization, and governance processes.
• Define role naming conventions, ownership models, access request processes, and security governance standards.
• Work with Business Process Owners and functional teams to identify appropriate business roles and organizational restrictions.
• Support user lifecycle and access provisioning activities, including joiner, mover, and leaver processes.
• Troubleshoot authorization, provisioning, synchronization, and access-related issues across integrated SAP systems.
• Support testing activities including unit testing, SIT, UAT, regression testing, and security validation.
• Prepare security design documents, role matrices, process flows, test scenarios, and operational procedures.
• Lead project activities, manage stakeholders, mentor junior consultants, and support project delivery and financial management.

Key skills required

• Experience in SAP Security with strong hands-on experience in SAP Identity Access Governance (IAG) and cloud-based SAP security.
• Experience in SAP S/4HANA Cloud, particularly SAP S/4HANA Cloud Public Edition , and understanding of its business role and authorization concepts.
• Strong understanding of SAP IAG architecture, configuration, administration, and access governance capabilities .
• Experience designing and managing business roles, business role templates, access assignments, role owners, and approval workflows in SAP IAG.
• Strong understanding of SAP authorization concepts, authorization objects, organizational fields, restrictions, and least-privilege access .
• Experience with SoD and Critical Access Risk Analysis , risk rule configuration, risk remediation, and mitigation.
• Knowledge of SAP Cloud Identity Services – Identity Authentication (IAS) and Identity Provisioning (IPS) and their role in SAP identity and access management.
• Experience with SAP IAG integration with S/4HANA Cloud and other SAP applications .
• Knowledge of SAP SuccessFactors integration and hybrid IAG scenarios , including identity synchronization and provisioning.
• Understanding of SAP GRC Access Control and experience supporting IAG–GRC hybrid landscapes .
• Ability to analyze business processes and translate them into appropriate business roles and access restrictions .
• Experience in troubleshooting authorization, provisioning, synchronization, and access-related issues.
• Understanding of SAP security governance, access certification, periodic access reviews, and compliance requirements.
• Ability to lead security workshops and communicate effectively with business stakeholders, process owners, architects, and technical teams.
• Proficient in leading a team, managing delivery activities, and supporting project financials.
• Ability to communicate clearly and effectively in a timely manner.

Required Skills

• Education – Any graduate.
• Strong experience in SAP IAG / SAP Cloud Security .
• Experience with SAP S/4HANA Cloud Public Edition, Business Roles, and Fiori security .
• Hands-on experience with SAP IAG access requests, role management, access analysis, SoD, and access reviews .
• Knowledge of SAP IAS, IPS, and SAP Cloud Identity Services .
• Experience with SAP IAG and GRC integration/hybrid security scenarios .
• Understanding of SAP SuccessFactors and identity provisioning/integration concepts.
• Strong knowledge of SAP authorization and role design principles.
• Excellent communication and stakeholder management skills.
• Strong analytical and problem-solving abilities.
• Ability to work collaboratively with clients, functional teams, architects, and internal security teams.