Roles & Responsibilities :
Participate in SAP Brownfield implementation, Conversion and carve out projects including security requirement gathering, role redesign, role remediation, and user access validation.
Support SAP system upgrade activities including SU25 steps, authorization impact analysis, role adjustments, and role testing during upgrades.
Provide support for SAP S/4HANA Public Cloud IAM, including management of Business Roles, Business Users, role assignments, and troubleshooting access issues within the SAP Public Cloud environment.
Design, build, and maintain SAP security roles including single, composite, and derived roles based on business requirements using PFCG and SAP authorization concepts.
Support SAP S/4HANA security activities including role maintenance, authorization adjustments, and management of Fiori roles, catalogs, and groups.
Provide support/Upgrade for SAP GRC Access Control modules including Access Risk Analysis (ARA), Access Request Management (ARM), Emergency Access Management (EAM), and Business Role Management (BRM).
Perform Segregation of Duties (SoD) analysis, identify conflicts, implement mitigating controls, and support periodic SoD reviews to ensure compliance with security and audit policies.
Perform user administration activities such as user creation, role assignment, access modifications, and resolving authorization issues using tools like SU01, SU53, SUIM, and ST01.
L2/L3 production support for SAP Security and GRC issues and work with functional and BASIS teams to troubleshoot and resolve authorization-related problems.
Support internal and external audit requirements by providing user access reports, SoD analysis, role documentation, and assisting in periodic user access reviews.
Maintain security documentation, support role transports across system landscapes, and ensure adherence to SAP security governance and best practices.