Minimum 2 years of practical experience in SAP security and authorization solutions
Strong understanding of SAP authorization concepts across various platforms like ECC and S/4 HANA
Experience implementing and managing SAP GRC suite, particularly versions 12 and above
Familiarity with identity management solutions like SAP IDM or equivalent
Knowledge of compliance regulations such as GDPR and Sarbanes Oxley
Bachelor's degree and relevant professional certifications like CISA or CISSP
Ability to communicate technical requirements effectively to both business and IT stakeholders.
Responsibilities
Manage complex SAP Security implementation projects, with a focus on S/4 HANA solutions
Implement GRC Access Controls and related modules
Engage with clients to define requirements and configure tailored security solutions
Conduct comprehensive controls and configuration reviews of SAP systems
Advise clients on regulatory compliance related to SAP controls
Support security redesign and remediation projects for SAP environments
Develop and nurture relationships with new and existing clients
Integrate security solutions within broader cybersecurity frameworks.
Benefits
Flexible working arrangements, allowing candidates from any US location
Opportunity to work on high-impact projects with a recognized consultancy
Support for professional development and certifications in the field
Collaboration with experienced colleagues in a well-regarded firm
Exposure to a variety of clients and industries, enhancing professional growth.
Full Job Description
Job Title: SAP GRC/Security Consultant Company: Turnkey Consulting Location: United States (Considering candidates in any US location)
Job Summary
The candidate will play a key role in handling client engagements, as well as utilizing strong technical experience to find solutions that best fit our clients' needs. We are looking for a team-player and strong all-rounder with at least 2 implementations and 2 years of practical experience in the following areas
Detailed understanding of the SAP authorization concept in one or more of the following areas: ECC, SAP S/4 HANA, HCM, CRM, SRM, BW, BI, BPC, SAP HANA
Experience of designing, building and implementing SAP security and authorization solutions
Exposure to various system user interfaces (UI), including SAP but also other relevant SaaS products
Detailed understanding of SAP GRC suite of applications, with a demonstrable specialism in core modules contained within (ideally v12 onward)
Experience of IDM solutions, either SAP's IDM solution, or non-SAP, such as SailPoint or Saviynt would be of advantage.
Experience of third-party solutions to secure SAP estates also an advantage
Experience of SAP Fiori catalogs, groups, pages and spaces
Experience of SAP IAG solutions would be an advantage, both IAS and IPS
Our experienced consultants are a key driver of our success as one of the most trusted names in the end-to-end security arena and we are committed to delivering to a consistently high standard. Key responsibilities of the role are:
Task management of large / complex implementations, especially in Application security or enterprise risk/identity projects
Implementation of GRC technology and supporting modules
Work with clients to understand "why" they're in need of such solutions, define requirements and configure solutions to best fit those needs
Perform controls and configuration reviews involving relevant application systems and processes
Advise clients on controls in their enterprise systems relating to regulatory or legislative compliance
Review and advise on security redesign and remediation projects
Provide a broader range of information risk management solutions to clients as required
Build relationships with new clients and maintain good relations with our existing client base
Integrate solutions into wider cybersecurity controls estates
We are looking ideally for someone with the following attributes:
The ability to troubleshoot and diagnose problems / issues and provide prompt, robust resolution
An enquiring mind to discover "why" clients need to introduce the controlling measures.
The ability to manage projects within varied client engagements and lead reviews and implementations
Knowledge of corporate business processes and their control points
Good understanding of various IT regulations and standards, including: Sarbanes Oxley, COBIT, ISO series & the GDPR
Bachelor's degree
Professional certification (e.g. CISA, M.Inst.ISP, CISSP, ISO)
SAP certification (Security, GRC)
Consulting background
Strong written and verbal communication skills
Integration experience
Ability to act as an SME to install, design, engineer and configure security solutions to meet client needs
Ability to effectively manage own time and priorities effectively and to work both as part of a team and individually.
Able to communicate technical and functional requirements to both the business and IT
Key responsibilities of the role will include:
Project manage large / complex SAP Security implementations, especially for S/4 HANA projects
Implementation of GRC Access Controls and supporting modules
Work with clients to understand requirements and configure solutions to best fit those needs
Perform controls and configuration reviews involving SAP systems
Advise clients on controls in SAP relating to regulatory or legislative compliance
Review and advise on SAP security redesign and remediation projects
Provide a broader range of information risk management solutions to clients as required
Build relationships with new clients and maintain good relations with our existing client base
Integrate solutions into wider cybersecurity controls estates
