GMS-Senior-SAP Security IAM
No salary listed
Senior
Bengaluru, Karnataka, India
In Person
IT OperationsEnterprise Applications
About the job
Requirements
- Strong hands-on experience in SAP Security, SAP GRC Access Control and SAP user administration.
- Experience in SAP role design, role build, user acceptance testing support, transport movement and production deployment.
- Working knowledge of SAP GRC Access Risk Analysis, Emergency Access Management, Access Request Management and risk ruleset management.
- Experience with SAP Firefighter ID management, log review and emergency access governance.
- Experience implementing and operating SAP user access reviews and quarterly access certification processes.
- Experience with SAP IDM provisioning, workflows, connectors and identity lifecycle management.
- Knowledge of SAP S/4HANA security, Fiori security, authorization objects and business role concepts.
- Understanding of SAP GRC Process Control and Continuous Control Monitoring.
- Experience supporting SAP internal audits, external audits, SOX, ITGC and compliance reviews.
- Strong documentation, stakeholder management, evidence management and issue resolution skills.
Responsibilities
- Create, modify, maintain and revoke SAP user access using approved access request, provisioning and governance processes.
- Own role requirement gathering, role design, build, testing, transport, go-live and ongoing maintenance.
- Administer SAP GRC Access Control processes across Access Risk Analysis, Emergency Access Management, Access Request Management and access governance workflows.
- Support quarterly Continuous Control Monitoring updates, control monitoring, exception validation and control evidence management.
- Manage identity lifecycle workflows, provisioning, deprovisioning, reconciliation and connector issue resolution.
- Implement and operate user access reviews, firefighter reviews, audit evidence packs and remediation tracking.
- Design, maintain, test and govern segregation-of-duties and critical-access rulesets for SAP and integrated applications.
- Assess SAP authorization, user, privileged access, RFC, technical user and security configuration risks.
- Manage SAP user ID creation, modification, locking, unlocking, validity updates, role assignment, termination and periodic user maintenance across SAP systems.
- Support access provisioning and deprovisioning through SAP IDM and SAP GRC Access Control workflows.
- Handle access requests, emergency requests, weekend releases and production access support activities.
- Ensure access is provisioned based on approved requests, business need, least privilege and segregation-of-duties requirements.
- Maintain user master data, license-relevant user classifications, technical users, communication users and validity controls.
- Design, build, test and maintain SAP security roles for SAP S/4HANA, ECC, BW, Fiori, BTP integrations and related SAP platforms.
- Perform role requirement gathering with business process owners, functional teams, control owners and country rollout teams.
- Translate business requirements into authorization concepts, role matrices, derived roles, composite roles and Fiori catalogs, groups, spaces or pages.
- Own the role lifecycle from requirement gathering, design, build and unit testing through user acceptance testing, defect remediation, transport movement, go-live and hypercare.
- Support role redesign, role cleanup, segregation-of-duties reduction, access optimization and country-specific role rollout activities.
- Configure and support GRC workflows, approval paths, request types, provisioning settings, connectors and access request exceptions.
- Perform access risk analysis for users, roles, access requests and role changes.
- Monitor and resolve GRC provisioning failures, workflow issues, connector errors and control exceptions.
- Support integrated access governance across SAP S/4HANA, BW, Ariba, SuccessFactors, BTP and other connected applications.
- Manage SAP GRC Access Risk Analysis for users, roles, profiles, critical transactions and sensitive authorization combinations.
- Design, update and maintain SAP risk rulesets including risks, functions, actions, permissions and mitigating controls.
- Perform ruleset impact assessment, regression testing and approval tracking before production deployment.
- Coordinate segregation-of-duties risk remediation, mitigation control assignment and risk owner sign-off.
- Maintain ruleset documentation, change history, test evidence and version control.
- Manage SAP Firefighter ID setup, owner assignment, controller assignment, reason codes and emergency access configuration.
- Support emergency access request, approval, usage monitoring, log review and closure processes.
- Perform SAP GRC Firefighter log reviews and coordinate timely controller review and sign-off.
- Investigate unauthorized, excessive or inappropriate firefighter usage and track remediation actions.
- Maintain audit-ready evidence for firefighter assignment, usage, review, exceptions and approvals.
- Implement SAP user access review campaigns using SAP GRC or approved access certification tools.
- Prepare user, role, critical access, segregation-of-duties, privileged access and firefighter review datasets.
- Coordinate quarterly access reviews with managers, role owners, process owners and control owners.
- Track review completion, access retention, revocation, exceptions, remediation actions and management approvals.
- Maintain complete evidence for internal audit, external audit and compliance reporting.
- Support SAP GRC Process Control operations, control mapping, monitoring rules and issue tracking.
- Perform quarterly Continuous Control Monitoring updates based on process, configuration, risk and control changes.
- Maintain Continuous Control Monitoring business rules, monitoring schedules, exception logic and control owner assignments.
- Coordinate with process owners to validate Continuous Control Monitoring exceptions, control failures and remediation actions.
- Prepare control evidence, deficiency documentation and management reporting.
- Manage identity lifecycle processes in SAP IDM including joiner, mover, leaver, role assignment, provisioning and deprovisioning workflows.
- Support integrations between SAP IDM, human-resources source systems, SAP GRC, SAP systems and downstream applications.
- Maintain IDM workflows, connectors, provisioning rules, approval logic and reconciliation processes.
- Troubleshoot provisioning failures, access synchronization issues and identity data inconsistencies.
- Support future-state identity and access management planning involving SAP Cloud Identity Services, SAP IAG or enterprise identity platforms where applicable.
- Support SAP security activities for new country rollouts, company code rollouts, business process deployments and regional templates.
- Gather local access requirements and align them with global role design, control standards and segregation-of-duties requirements.
- Prepare access matrices, role mapping, test scripts, cutover plans and go-live readiness evidence.
- Support unit testing, user acceptance testing, defect resolution, transport movement, weekend release and hypercare activities.
- Ensure country-specific access is secure, approved, tested and audit-ready before production use.
- Perform SAP native security assessments across S/4HANA, ECC, BW, GRC, Solution Manager, BTP-integrated applications and other SAP platforms.
- Review SAP authorization objects, critical transactions, privileged users, RFC users, communication users, generic IDs and sensitive access.
- Identify excessive access, weak role design, unused roles, shared IDs, control gaps and configuration weaknesses.
- Support SAP internal audit, external audit, SOX, ITGC and compliance reviews.
- Prepare audit evidence packs, management responses, remediation plans and closure validation evidence.
Desired Qualifications
- Experience with SAP S/4HANA on RISE or hybrid SAP cloud landscapes.
- Knowledge of SAP BTP security, role collections, identity provider integration and cloud authorization concepts.
- Experience with SAP Ariba and SAP SuccessFactors access governance.
- Experience with SAP Cloud Identity Services, IAS, IPS, SAP IAG or Microsoft Entra ID integration.
- Awareness of cross-application segregation-of-duties risks across SAP and cloud applications.
- Experience in global SAP template rollouts and country-specific security deployments.
- Knowledge of SOX, ITGC, NIST, ISO 27001 or internal control frameworks.
About the company
EY is a global professional services firm that offers consulting, assurance (audits), tax, and transaction advisory services to a wide range of clients including corporations, SMEs, and government entities. It earns fees for these services and uses its industry expertise and a worldwide network to help clients optimize operations, manage risk, and achieve sustainable growth. EY differentiates itself through its scale and reach, industry specialization, focus on end-to-end services, strategic alliances, and emphasis on innovation and sustainability, including improving audit quality and addressing digital economy needs and supply chain visibility. The company’s goal is to help clients navigate complex regulatory and business environments, transform finance and tax functions, and drive efficiency and resilience across their operations.
Company Size
1,001-5,000
Company Stage
N/A
Total Funding
N/A
Headquarters
London, United Kingdom
Founded
1991
Get referred to Ernst & Young
See people who can refer or advise you
Simplify's Take
What believers are saying
- EY.ai Agentic for Sales launched March 2, 2026 with Snowflake and Canva.
- EY uses client-zero deployments, scaling Copilot across 400,000 people by May 2026.
- EY’s 2026 AI assurance push monetizes client demand for governance, controls, and risk reviews.
What critics are saying
- Sabah filed RM2.4 billion audit-negligence claims against EY on July 30, 2026.
- EY set aside £188 million in March 2026 after NMC, Shell, and Made.com scrutiny.
- Repeated audit failures can destroy trust, trigger client defections, and shrink the franchise permanently.
What makes Ernst & Young unique
- EY Canvas processes 1.4 trillion journal-entry lines across 160,000 global audits.
- EY-Microsoft invested US$1b+ in May 2026 to industrialize enterprise AI delivery.
- EY launched agentic audit AI on April 7, 2026, spanning Assurance and AI assurance.
Help us improve and share your feedback! Did you find this helpful?
Benefits
- Professional Development Budget
- Flexible Work Hours
- Remote Work Options