SAP Security & GRC Architect

About the role

We are seeking an experienced SAP Security & GRC Architect to lead the design and implementation of security and governance solutions across a complex SAP landscape. The role involves shaping security strategy for ECC, S/4HANA, BW/4HANA, Fiori, BTP, Ariba, IBP and SuccessFactors environments.

Key responsibilities

• Design and implement SAP Security architecture across on‑premise and cloud modules.
• Create and maintain enterprise role matrices, develop single, composite and derived roles using PFCG.
• Define authorization concepts for S/4HANA, including Fiori tile‑based access and catalog mapping.
• Implement SAP GRC Access Control (ARA, ARM, BRM, EAM, UAR) and configure Segregation of Duties (SOD) rule sets.
• Build risk and control matrices aligned with SOX and internal audit requirements.
• Deploy SAP Identity Access Governance (IAG) for cloud applications and enable hybrid access governance.
• Manage privileged access, emergency access (Firefighter IDs) and monitor security logs.
• Develop risk frameworks, automate continuous control monitoring, and support audit reporting.

Required profile

• 15+ years of hands‑on experience in SAP Security, role design and GRC.
• Proven track record of leading global security transformations and S/4HANA security projects.
• Strong understanding of regulatory compliance (SOX) and internal audit processes.

Required skills

• SAP ECC, SAP S/4HANA, SAP BW/4HANA, SAP Fiori, SAP BTP, SAP Ariba, SAP IBP, SAP SuccessFactors
• SAP GRC Access Control, SAP GRC Process Control, SAP GRC Risk Management
• SAP Identity Access Governance (IAG)
• PFCG role development, SuccessFactors RBP, CUA
• SOX compliance, IT audit, Segregation of Duties (SOD) management