Key Responsibilities SAP Security Administration • Design, build, and maintain SAP security roles and authorization concepts for SAP ECC, SAP S/4HANA, SAP BW/4HANA, SAP BTP, SAP Public Cloud, and other SAP applications. • Administer user provisioning, role assignments, privileged access, and authorization troubleshooting. • Develop and maintain role design standards, naming conventions, and security governance processes. Role Design & Authorization Management • Design and implement single, composite, derived, and Fiori business roles. • Perform authorization analysis using SU53, STAUTHTRACE, and security trace tools. • Support organizational changes, new business processes, and application implementations through secure role design. • Conduct role optimization and cleanup activities to improve security and reduce risk. SAP GRC & SAP IAG Implementation • Participate in the implementation, configuration, and support of SAP GRC Access Control and SAP Cloud Identity Access Governance (IAG). • Configure and support: • Access Risk Analysis (ARA) • Access Request Management (ARM) • Business Role Management (BRM) • Emergency Access Management (EAM) • User Access Review (UAR) • Perform Segregation of Duties (SoD) analysis and assist with risk remediation and mitigating controls. • Support periodic access certifications and audit activities.