SAP HANA Security

SAP GRC Access Control and SAP S/4HANA Security Specialist

Role Overview

We are seeking an experienced SAP GRC Access Control Specialist with SAP S/4HANA expertise to design, configure, and maintain our access governance, emergency access, and Segregation of Duties (SoD) framework. In this role, you will be responsible for end-to-end MSMP workflow design, Emergency Access Management (EAM), User Access Reviews (UAR), continuous risk analysis, and adapting GRC rules/workflows to support our S/4HANA and Fiori environment.

Key Responsibilities

S/4HANA & Security Integration (Core Focus)

·                     S/4HANA Access Governance: Adapt and optimize GRC Access Control rules, SoD risk matrices, and workflows specifically for SAP S/4HANA, including Fiori catalogs, target mappings, business roles, and S/4-specific authorization objects.

·                     Connector & Infrastructure Management: Setup, Maintain and troubleshoot GRC AC connectors to S/4HANA and other target systems.

SAP GRC Access Control Configuration & Operations

·                     MSMP Workflow Setup: Design, configure, and maintain Multi-Stage Multi-Path (MSMP) workflows for Access Risk Management (ARM), custom path routing, agent definitions, notification templates, and BRFplus decision rules.

·                     Emergency Access Management (EAM): Configure and manage Firefighter IDs (FFIDs), Firefighter roles, owners, controllers, reason codes, and automated EAM log review workflows across S/4HANA environments.

·                     Access Reviews & Certifications: Plan, launch, and manage periodic User Access Reviews (UAR) and SoD Role Re-certifications, streamlining manager and process owner approval workflows.

·                     Risk Analysis & Remediation (ARA): Configure Segregation of Duties (SoD) and Sensitive Access risk matrices for S/4HANA business processes, run risk analysis reports, and manage mitigating controls/assignments.

·                     Audit & Compliance Support: Audit Firefighter usage, log reviews, and access request approvals to ensure strict compliance with SOX and internal audit standards.

Required Skills & Qualifications

Required Skills

·                     SAP S/4HANA Experience (Required): Proven hands-on experience configuring GRC Access Control specifically within an SAP S/4HANA ecosystem, including deep knowledge of S/4HANA security concepts, Fiori tile/launchpad security, and updating GRC rule sets for S/4 processes.

·                     SAP GRC Access Control Expertise: Deep functional and technical hands-on experience in SAP GRC AC 12.0 covering ARA, ARM, EAM, and BRM modules.

·                     MSMP & BRF+ Rule Engine: Strong proficiency in configuring MSMP workflows, defining custom stages, paths, notification templates, and maintaining BRFplus decision tables/rules.

·                     EAM / FFID Governance: Solid experience setting up Firefighter IDs, controller assignments, notification alerts, and auditing EAM log reviews in S/4HANA.

·                     Access Review Administration: Proven capability in running UAR campaigns, tracking completion, and enforcing access revocation/remediation.

Preferred / Nice-to-Have Skills

·                     IAM Integration: Experience integrating GRC AC with enterprise Identity & Access Management systems (e.g., Azure AD, SailPoint, Okta).

·                     Certification: SAP Certified Application Associate – SAP Access Control / SAP Security.

Soft Skills

·                     High attention to detail regarding security compliance, risk mitigation, and audit trails.

·                     Strong communication skills to train Firefighter owners, controllers, and business approvers.

·                     Collaborative mindset to work closely with IT, Internal Audit, and Risk Management teams.