Manager SAP Authorization & Security
Full-Time | Pune, India | SAP Security
Role Overview
We are seeking an experienced SAP Security and GRC professional to lead the SAP Authorizations function. You will be responsible for designing, maintaining, and governing SAP role concepts across ECC, S/4HANA, BW/4HANA, and cloud platforms. This is a hands-on leadership role requiring deep technical knowledge of SAP security combined with strong stakeholder and compliance management skills.
Key Responsibilities
SAP Roles & Authorization Management:
-
Design and maintain SAP roles Single, Composite, Derived, and AGR-based roles
-
Implement authorization concepts aligned with business requirements
-
Manage user administration (SU01), role transports, and authorization troubleshooting
-
Perform SU53, SU24, ST01, SUIM, and authorization trace analysis
-
Manage security for SAP ECC, S/4HANA, BW/4HANA, and SAP Fiori
-
Design and maintain Single, Composite & Derived roles using PFCG
-
Support S/4HANA Fiori security including Catalogs, Groups, Spaces & Pages
-
Implement security best practices and audit controls
-
Enforce least-privilege and secure role design principles
Cloud Identity & Integration
-
Manage SAP Cloud Identity Authentication Service (IAS) and Identity Provisioning Service (IPS)
-
Manage SAML/OAuth integrations with SAP BTP and cloud applications
SAP GRC Access Control
-
Administer SAP GRC Access Control modules: ARA, ARM, BRM, and EAM
-
Perform SoD risk analysis and implement mitigation controls
-
Configure and maintain GRC rule sets
-
Manage Firefighter IDs and monitor EAM logs
-
Configure and support access request workflows and approval configurations
-
Conduct periodic access reviews and compliance reporting
-
Integrate SAP systems with GRC Access Control
Additional Responsibilities
-
Deputy for the SAP Security Architect and other SAP Technology colleagues as required
-
Maintain up-to-date technical knowledge to drive continuous improvement aligned with IT strategy
-
Perform additional duties commensurate with the role as directed by management
Required Qualifications
-
5+ years of hands-on SAP Security & GRC experience
-
Strong expertise in SAP Roles & Authorizations with PFCG role design methodology
-
Proven experience with SAP GRC Access Control
-
Experience with SAP Cloud Identity Services (IAS/IPS)
-
Hands-on experience with S/4HANA and SAP Fiori authorizations
-
Strong knowledge of SoD controls and compliance frameworks
-
Experience integrating SAP with Active Directory / Azure AD
-
Understanding of SAP BTP security concepts
-
Experience in at least one S/4HANA implementation project
-
Experience in global, multi-system SAP environments
-
Strong English proficiency (spoken and written); German language skills are a significant advantage
-
Excellent communication skills, both technical and business-oriented
-
Strong analytical and problem-solving abilities; self-organized and result-oriented
Preferred / Beneficial
-
SAP Security or GRC Certification
-
SAP BTP or Cloud Identity Certification
-
Experience in the manufacturing industry
Key Skills
-
SAP Roles & Authorizations Administration
-
SAP GRC Access Control
-
SAP Cloud Identity Services (IAS/IPS)
-
SAP BTP
-
SAP Cloud ALM
-
PFCG
-
SoD Controls
-
Azure AD Integration
(ref:hirist.tech)