Key Responsibilities & Required Skills
Support SAP S/4HANA system conversion (Brownfield / Upgrade) activities from a security perspective, including impact assessment, role remediation, and authorization optimization.
Analyze existing SAP ECC roles and authorizations and perform role redesign, remediation, and optimization to align with S/4HANA authorization concepts.
Support SAP S/4HANA rollout projects by designing and adapting roles for new company codes, plants, sales organizations, or geographic regions while maintaining global security standards.
Maintain and enhance single, derived, and composite roles using PFCG, ensuring alignment with organizational structure and business requirements.
Review and update SU24 authorization defaults, authorization objects, and role menus as part of the S/4HANA conversion and rollout activities.
Implement and support SAP Fiori security, including configuration of catalogs, spaces/pages, business roles, and OData service authorization.
Perform Segregation of Duties (SoD) risk analysis and remediate access conflicts using SAP GRC Access Control.
Configure and support SAP GRC modules, including Access Risk Analysis (ARA), Access Request Management (ARM), and Emergency Access Management (EAM).
Support role remediation and access risk mitigation activities during system upgrade, rollout, and post-go-live phases.
Configure and support SAP Identity Authentication Service (IAS) for authentication policies, identity federation, and Single Sign-On (SSO) across SAP systems.
Configure SAP Identity Provisioning Service (IPS) to enable automated user and role provisioning between SAP systems and cloud applications.
Support SAP BTP security administration, including role collections, subaccount security configuration, and trust setup with IAS.
Work with Basis and infrastructure teams to establish secure connectivity and identity federation between S/4HANA, SAP BTP, and other SAP cloud solutions.
Support role testing, regression testing, and User Acceptance Testing (UAT) during upgrade and rollout phases.
Collaborate with functional teams to resolve authorization issues arising from S/4HANA simplification items, new applications, or rollout-specific business requirements.
Assist in user provisioning, role maintenance, and access request management during implementation and rollout phases.
Support cutover activities, data migration phases, and post-go-live stabilization from a security perspective.
Provide support for audit and compliance requirements, including SoD reporting, access reviews, and documentation of security controls.
Recommend security optimization, role standardization, and governance improvements across the S/4HANA landscape.
Strong verbal and written communication skills with the ability to effectively interact with business users, functional teams, and auditors on SAP Security and GRC related topics.
Ability to clearly document security processes, role designs, and access control procedures, and present findings during access reviews, compliance discussions, and audit meetings.