Responsibilities
- Consultant will be responsible for SAP Security access and user access controls for all the SAP instances.
- You will work closely with the SAP functional teams and the System integration partner in architecting, designing, implementing, and governing the SAP security framework for a large Business process transformation program.
- Develop and maintain standards and procedures for the SAP Security (Fiori, Application and HANA) and user access controls all SAP instances.
- Review the business blueprint, functional specifications for SAP security role development and user acceptance test plans and participate in cutover activities during go-live phases.
- Develop centralized process for SAP security role administration.
- Ensure that the security roles are appropriately assigned to users and tested thoroughly before deployment.
- Evaluate business risks associated with security role design, implement appropriate controls to address those risks and provide recommendations on ways to simplify and streamline the security design.
- Develop the GRC rule sets (SOD), workflows and approvers for user provisioning /de-provisioning, authentication/authorization/emergency access and access recertification based on business needs, industry best practices, and regulatory requirements.
- Identify role owners and automate the role and user provisioning processes.
- Monitor, report and remediate elevated role provisioning to ensure unauthorized access removal for live production.
Profile
- Experience as an SAP Authorization consultant
- S/4HANA project implementations or support as Authorization consultant
- Extensive experience in SAP HANA Authentication, Authorizations, Analytical privileges, User management, Role design and Fiori Security.
- Experience in Security Design & Blueprinting, Customization, Implementation and Auditing of SAP Roles and Authorization (ECC, S/4 HANA & Fiori)
- Experience with GRC is beneficial.
- SAP S/4HANA certification beneficial
- Must be fluent in English (Spoken & written)
- Travelling is a job requirement, and candidates must be able to travel around the region for assignments as required by clients and projects.