Senior SAP Security, GRC Access Control and Identity Management Specialist

About the role

EY is seeking a Senior SAP Security, GRC Access Control and Identity Management Specialist to manage end-to-end SAP user access, role design, identity lifecycle, access governance, emergency access, risk analysis, audits and security operations across a complex SAP landscape. The role supports SAP S/4HANA on RISE, SAP GRC Access Control, SAP GRC Process Control, SAP IDM, SAP BTP, SAP Ariba, SAP SuccessFactors, SAP BW/BW4HANA and related integrations. Based in Bengaluru, KA, IN, the position operates at a Senior Analyst / Consultant / Specialist / Lead level depending on experience, with primary focus on user access management, role lifecycle, GRC operations, IDM provisioning, risk ruleset management, audits and access reviews.

What you’ll do

• Manage SAP user ID creation, modification, lock, unlock, validity updates, role assignment, termination and periodic user maintenance across SAP systems.
• Design, build, test and maintain SAP security roles for SAP S/4HANA, ECC, BW, Fiori, BTP integrations and related SAP platforms.
• Administer SAP GRC Access Control modules including Access Risk Analysis, Emergency Access Management, Access Request Management and Business Role Management.
• Manage SAP GRC ARA risk analysis for users, roles, profiles, critical transactions and sensitive authorization combinations.
• Manage SAP Firefighter ID setup, owner assignment, controller assignment, reason codes and emergency access configuration.
• Implement SAP user access review campaigns using SAP GRC or approved access certification tools and coordinate quarterly access reviews.
• Support SAP GRC Process Control operations, control mapping, monitoring rules and quarterly Continuous Control Monitoring updates.
• Manage identity lifecycle processes in SAP IDM including joiner, mover, leaver, role assignment, provisioning and deprovisioning workflows.

What you’ll bring

• Strong hands-on experience in SAP Security, SAP GRC Access Control and SAP user administration.
• Experience in SAP role design, role build, UAT support, transport movement and production deployment.
• Working knowledge of SAP GRC ARA, EAM, ARM and risk ruleset management.
• Experience with SAP Firefighter ID management, log review and emergency access governance.
• Experience implementing and operating SAP user access reviews and quarterly access certification processes.
• Experience with SAP IDM provisioning, workflows, connectors and identity lifecycle management.
• Knowledge of SAP S/4HANA security, Fiori security, authorization objects and business role concepts.
• Understanding of SAP GRC Process Control and Continuous Control Monitoring.

Nice to have

• Experience with SAP S/4HANA on RISE or hybrid SAP cloud landscapes.
• Knowledge of SAP BTP security, role collections, identity provider integration and cloud authorization concepts.
• Experience with SAP Ariba and SAP SuccessFactors access governance.
• Experience with SAP Cloud Identity Services, IAS, IPS, SAP IAG or Microsoft Entra ID integration.
• Awareness of cross-application SoD risks across SAP and cloud applications.
• Experience in global SAP template rollouts and country-specific security deployments.
• Knowledge of SOX, ITGC, NIST, ISO 27001 or internal control frameworks.

Skills