Consultant | SAP Security & GRC AC | Ahmedabad | SAP | DSA Metals, Mining and Industrial • Job requisition ID : 114242 • Location: Ahmedabad • Entity: Deloitte Touche Tohmatsu India LLP The team Enterprise technology must do much more than keep the wheels turning; it is the engine that drives functional excellence and the enabler of innovation and long-term growth. Learn more about ET&P Your work profile • Design, build, and maintain SAP Security roles and authorizations across SAP ECC, SAP S/4HANA, Fiori, and related SAP applications. • Lead role design, role build, user access management, and authorization activities across implementation, rollout, transformation, and support engagements. • Analyze Solution Design Documents (SDDs), business requirements, and process designs to define appropriate access controls, transaction authorizations, and Fiori role requirements. • Conduct workshops with business stakeholders, Functional Leads, Process Owners, and Solution Architects to gather security requirements and align access governance with business objectives. • Design and implement SAP role-based access controls (RBAC), authorization concepts, and security governance frameworks. • Support SAP Fiori security configuration, catalog design, group management, space/page assignments, and role mappings. • Troubleshoot security and authorization issues, investigate access-related incidents, and provide timely resolutions during project and support activities. • Support implementation and enhancement of SAP Identity & Access Management (IAM) and Access Governance solutions, including access request workflows, approval processes, user provisioning, and compliance controls. • Collaborate with Security, Functional, BASIS, Infrastructure, and Architecture teams to implement scalable security controls across SAP landscapes. • Support segregation of duties (SoD) analysis, sensitive access monitoring, user access reviews, compliance assessments, and audit activities. • Contribute to security architecture documentation, governance frameworks, risk assessments, and security design decisions. • Act as a key contributor to SAP Security and IAM initiatives, providing guidance on access controls, governance, compliance, and best practices. • Provide mentoring and knowledge sharing to junior team members and support continuous improvement initiatives. Key Requirements • 4-7 years of hands-on SAP Security and Authorization experience in SAP ECC and/or SAP S/4HANA environments. • Strong expertise in SAP role design, role build, authorization concepts, user administration, and access management processes. • Hands-on experience with SAP Security objects, authorization troubleshooting, user provisioning, and access control frameworks. • Strong understanding of SAP Fiori security concepts, including Launchpad roles, catalogs, groups, spaces, pages, and role-based access design. • Experience analyzing business requirements and translating them into secure and scalable SAP authorization solutions. • Knowledge of Segregation of Duties (SoD), sensitive access management, user access reviews, audit controls, and governance processes. • Exposure to SAP Access Governance and Identity Management solutions such as SAP GRC Access Control, SAP Identity Access Governance (IAG), SailPoint ISC, or similar tools. • Experience supporting security activities during implementation, rollout, upgrade, transformation, and support projects. • Strong stakeholder management, workshop facilitation, and communication skills. • Ability to work independently with business, functional, technical, and security teams to drive security outcomes. • Experience contributing to security architecture, compliance initiatives, and enterprise IAM programs is highly desirable. • Strong analytical, troubleshooting, problem-solving, and documentation skills. Education • Bachelor's degree in Computer Science, Information Technology, Engineering, Cybersecurity, or a related discipline. • SAP Security, SAP GRC Access Control, SAP IAG, or Identity & Access Management certifications are preferred. • Relevant certifications in Cybersecurity, Access Governance, Risk Management, or Information Security will be an added advantage. • Experience with enterprise IAM platforms, audit compliance frameworks, and SAP security governance programs is desirable.