Responsibilities

Consultant will be responsible for SAP Security access and user access controls for all the SAP instances.
You will work closely with the SAP functional teams and the System integration partner in architecting, designing, implementing, and governing the SAP security framework for a large Business process transformation program.
Develop and maintain standards and procedures for the SAP Security (Fiori, Application and HANA) and user access controls all SAP instances.
Review the business blueprint, functional specifications for SAP security role development and user acceptance test plans and participate in cutover activities during go-live phases.
Develop centralized process for SAP security role administration.
Ensure that the security roles are appropriately assigned to users and tested thoroughly before deployment.
Evaluate business risks associated with security role design, implement appropriate controls to address those risks and provide recommendations on ways to simplify and streamline the security design.
Develop the GRC rule sets (SOD), workflows and approvers for user provisioning /de-provisioning, authentication/authorization/emergency access and access recertification based on business needs, industry best practices, and regulatory requirements.
Identify role owners and automate the role and user provisioning processes.
Monitor, report and remediate elevated role provisioning to ensure unauthorized access removal for live production.

Requirements

Experience as an SAP Authorization consultant
S/4HANA project implementations or support as Authorization consultant
Extensive experience in SAP HANA Authentication, Authorizations, Analytical privileges, User management, Role design and Fiori Security.
Experience in Security Design & Blueprinting, Customization, Implementation and Auditing of SAP Roles and Authorization (ECC, S/4 HANA & Fiori)
Experience with GRC is beneficial.
SAP S/4HANA certification beneficial
Must be fluent in English (Spoken & written)
Travelling is a job requirement, and candidates must be able to travel around the region for assignments as required by clients and projects.

SAP Authorization Consultant