SAP S/4HANA Security Consultant

SAP S/4HANA Security Consultant

We are looking for an experienced SAP S/4HANA Security Consultant to join our SAP team and drive security design, implementation, and governance initiatives across SAP landscapes. The ideal candidate will possess strong expertise in SAP Security and Authorizations, SAP S/4HANA Security, SAP Fiori Security, and SAP GRC Access Control. The role requires hands-on experience in designing authorization concepts, implementing role-based access controls, ensuring Segregation of Duties (SoD) compliance, and supporting security requirements across SAP transformation programs.

The consultant will work closely with business stakeholders, functional consultants, auditors, BASIS teams, and project managers to ensure secure and compliant access management within SAP S/4HANA environments. The candidate should have a thorough understanding of SAP security architecture, risk management processes, audit controls, and access governance frameworks.

Key Responsibilities

• Design, develop, and maintain SAP security roles and authorization concepts across SAP S/4HANA environments in alignment with business and compliance requirements.
• Configure and support SAP authorization objects, composite roles, single roles, derived roles, and organizational level restrictions to enforce secure access controls.
• Perform end-to-end user administration activities including user provisioning, modifications, role assignments, and deprovisioning while adhering to established security policies.
• Lead security design workshops with business and functional teams to gather access requirements and translate them into scalable security solutions.
• Implement and manage SAP Fiori security components including catalogs, groups, spaces, pages, OData services, and launchpad authorizations.
• Support embedded analytics, CDS views, and SAP Gateway security requirements within S/4HANA landscapes.
• Conduct Segregation of Duties (SoD) assessments and collaborate with business stakeholders to identify, mitigate, and remediate security risks.
• Work extensively with SAP GRC Access Control modules such as Access Risk Analysis (ARA), Access Request Management (ARM), Emergency Access Management (EAM), and Business Role Management (BRM).
• Perform periodic user access reviews, role rationalization activities, and compliance assessments to support corporate governance requirements.
• Monitor and investigate authorization issues using tools such as SU53, ST01, STAUTHTRACE, SUIM, PFCG, and security audit logs.
• Support internal and external audit activities by providing security documentation, access reports, role matrices, SoD analysis reports, and compliance evidence.
• Collaborate with SAP Basis, Functional, ABAP, Integration, and Infrastructure teams to address complex authorization and security-related challenges.
• Participate in SAP implementation, rollout, upgrade, migration, and S/4HANA transformation initiatives to ensure secure deployment and access governance.
• Develop and maintain security standards, naming conventions, role design guidelines, and access control procedures.
• Evaluate new SAP products and technologies to ensure security requirements are integrated into enterprise architecture and business processes.

Required Technical Skills

• SAP Security & Authorization
• SAP Security and Authorizations
• SAP S/4HANA Security

SAP ECC Security:

• User and Role Administration
• Authorization Concept Design
• Role Build and Role Maintenance
• Organizational Level Security
• PFCG Configuration

SAP Fiori Security:

• Fiori Catalogs, Groups, Spaces, and Pages
• SAP Launchpad Security
• OData Service Authorizations
• SAP Gateway Security
• CDS View Authorization Concepts
• Embedded Analytics Security

SAP GRC & Compliance:

• SAP GRC Access Control
• Access Risk Analysis (ARA)
• Access Request Management (ARM)
• Emergency Access Management (EAM)
• Business Role Management (BRM)
• Segregation of Duties (SoD)
• Audit and Compliance Controls
• Access Governance and Risk Management

Troubleshooting & Monitoring:

• SU53
• SUIM
• PFCG
• ST01 Trace
• STAUTHTRACE
• Security Audit Log
• Authorization Analysis and Remediation

Preferred Skills:

• SAP BTP Security
• SAP IAS and IPS
• SAP Cloud Identity Services
• SAP MDG Security
• SAP Ariba Security
• SAP SuccessFactors Security
• SAP BW/4HANA Security
• SAP Analytics Cloud (SAC) Security
• SAP Solution Manager and ChaRM
• Identity and Access Management (IAM) Solutions