Job Description

Key Responsibilities

SAP Security Administration

• Design, build, and maintain SAP security roles and authorization concepts for SAP ECC, SAP S/4HANA, SAP BW/4HANA, SAP BTP, SAP Public Cloud, and other SAP applications.
• Administer user provisioning, role assignments, privileged access, and authorization troubleshooting.
• Develop and maintain role design standards, naming conventions, and security governance processes.

Role Design & Authorization Management

• Design and implement single, composite, derived, and Fiori business roles.
• Perform authorization analysis using SU53, STAUTHTRACE, and security trace tools.
• Support organizational changes, new business processes, and application implementations through secure role design.
• Conduct role optimization and cleanup activities to improve security and reduce risk.

SAP GRC & SAP IAG Implementation

• Participate in the implementation, configuration, and support of SAP GRC Access Control and SAP Cloud Identity Access Governance (IAG).
• Configure and support:
• Access Risk Analysis (ARA)
• Access Request Management (ARM)
• Business Role Management (BRM)
• Emergency Access Management (EAM)
• User Access Review (UAR)
• Perform Segregation of Duties (SoD) analysis and assist with risk remediation and mitigating controls.
• Support periodic access certifications and audit activities.