SAP Security Consultant

Role Overview We are seeking an experienced

SAP S/4HANA Security Consultant

with strong expertise in

Roles & Authorizations, Segregation of Duties (SoD), Audit compliance, and SAP GRC Access Control (AC)

including

Firefighter ID (FFID) management .

The ideal candidate should have hands-on experience in designing secure S/4HANA roles, mitigating access risks, managing emergency access, and supporting compliance requirements in enterprise environments.

Key Responsibilities Design, build, and maintain

S/4HANA roles and authorizations Configure and manage roles using

PFCG Maintain authorization defaults using

SU24 Perform user administration via

SU01 Conduct authorization analysis using

SUIM Design and maintain

Fiori catalogs, groups, and business roles Activate and secure

OData services

for Fiori applications Perform

SoD analysis and risk remediation Support internal and external audits (ITGC, access reviews) Manage

SAP GRC Access Control (AC)

processes Administer and monitor

Firefighter IDs (FFID)

and emergency access workflows Conduct periodic user access reviews and remediation Support security during S/4 implementations, rollouts, and upgrades Perform role redesign, optimization, and cleanup activities

Required Skills & Experience 6–8 years of hands-on SAP Security experience Strong experience in

SAP S/4HANA Security Deep expertise in

Roles & Authorizations Strong understanding of

Segregation of Duties (SoD) principles Hands-on experience in

SAP GRC Access Control (AC) Experience managing

Firefighter ID (FFID) / Emergency Access Management Strong experience in

Fiori Security (Catalogs, Groups, OData) Experience supporting

IT audits and compliance requirements Strong troubleshooting skills for authorization-related issues

Good to Have Experience in

S/4HANA On-Prem or Private Cloud (RISE) Exposure to role redesign aligned to FUE optimization Knowledge of embedded analytics / CDS authorization Experience in S/4 migration security support

Core Competencies Strong risk assessment and mitigation skills Compliance-driven and structured approach Ability to work independently in a remote setup Strong documentation and stakeholder coordination skills