SAP Security Consultant

About the role

IBM Consulting is seeking an SAP Security Consultant to design, implement, and maintain security configurations across a wide range of SAP solutions. You will protect business data, support compliance requirements, and enable secure operations while collaborating with functional, technical, cybersecurity, audit, and compliance teams.

Key responsibilities

• Configure and maintain SAP security roles, profiles, and authorization objects across multiple SAP platforms and modules.
• Administer user access, including provisioning, role assignments, and periodic access reviews.
• Support SAP GRC Access Control processes such as access risk analysis, emergency access management, role design, and workflow configuration.
• Monitor, analyze, and resolve security issues within SAP applications and integrated systems.
• Collaborate with business and IT stakeholders to define, implement, and document security requirements.
• Assist internal and external audits, ensuring compliance with SOX and other regulatory frameworks.
• Participate in SAP security projects, system upgrades, migrations, and new implementations.
• Maintain and enforce Segregation of Duties (SoD) rules and risk‑mitigation strategies.
• Create and maintain SAP security procedures, standards, and documentation.
• Identify and remediate SAP security vulnerabilities and apply necessary configuration or patch updates.

Required profile

• Bachelor's degree (preferred).
• At least 4 years of experience in SAP security administration across multiple SAP solutions.
• Hands‑on experience with SAP GRC Access Control.
• Understanding of regulatory and compliance requirements such as SOX and GDPR.
• Strong analytical, troubleshooting, and documentation skills.
• Ability to work effectively with cross‑functional teams and stakeholders.

Required skills

• SAP security administration
• SAP GRC Access Control
• SAP S/4HANA Cloud
• SAP Business Technology Platform (BTP)
• Identity management tools
• Authentication protocols
• Single sign‑on technologies
• Segregation of Duties (SoD) management