About company:
Syntax is a leader in providing Cloud and Managed Services to businesses across North America, South America, Europe, Pacific. Syntax cloud offerings, including their best-in-class Enterprise Cloud for ERP, continues to grow and accelerate; a unique offering that safely hosts and manages critical business applications. Syntax partners with global IT leaders such as Oracle, IBM, and others.
https://www.syntax.com/
Job Summary
We are seeking a Senior SAP Security and GRC Access Control Consultant with strong hands-on experience in SAP Security, SAP GRC Access Control, S/4HANA, and SAP Public Cloud environments. This role will be responsible for designing, implementing, and supporting secure access models across SAP landscapes while ensuring compliance, segregation of duties, audit readiness, and alignment with business and regulatory requirements.
The ideal candidate brings deep expertise in SAP authorization concepts, GRC processes, and modern SAP cloud security models, and can work closely with functional, Basis, audit, and business teams in complex delivery environments.
Key Responsibilities
- Design, build, and support SAP security roles and authorization concepts across SAP systems including S/4HANA and SAP Public Cloud
- Lead implementation and support of SAP GRC Access Control components, including:
- Access Risk Analysis (ARA)
- Access Request Management (ARM)
- Emergency Access Management (EAM / Firefighter)
- Business Role Management (BRM)
- Perform Segregation of Duties (SoD) analysis, risk identification, remediation planning, and compliance reporting
- Develop and maintain robust role design strategies, including single, composite, and derived roles
- Support SAP Fiori security, including catalogs, spaces, pages, and business roles where applicable
- Manage user provisioning, access requests, role changes, and approval workflows through GRC processes
- Maintain and update rulesets, risk matrices, mitigating controls, and governance processes
- Troubleshoot authorization issues using standard SAP tools and techniques such as role analysis and user authorization tracing
- Partner with project, AMS, audit, compliance, and business stakeholders to support security and controls requirements
- Support S/4HANA transformation, implementation, or upgrade projects with strong focus on secure role and access design
- Ensure access management processes are aligned with internal policies, compliance standards, and audit expectations
- Provide guidance and mentoring to junior consultants and project teams on SAP security and GRC best practices
Required Qualifications
- Bachelor's degree in Information Technology, Computer Science, Information Security, or a related field
- 8+ years of experience in SAP Security and Authorizations
- 5+ years of hands-on experience in SAP GRC Access Control
- Strong experience with SAP S/4HANA security architecture
- Demonstrated experience with SAP Public Cloud security and access concepts
- Strong working knowledge of SAP authorization design, role administration, and access governance
- Proven experience with SoD analysis, risk remediation, and audit support
- Hands-on experience with Fiori security concepts
- Strong troubleshooting and analytical skills for resolving authorization and access issues
- Experience working in global support, consulting, AMS, or project delivery environments
- Strong written and verbal communication skills
Preferred Qualifications
- Experience with RISE with SAP environments
- Knowledge of SAP BTP security concepts
- Experience with SAP Identity Authentication Services (IAS) and Identity Provisioning Services (IPS)
- Exposure to external IAM / IGA solutions such as SailPoint, Saviynt, or similar tools
- Experience supporting compliance frameworks such as SOX, ITGC, or GDPR
- Prior experience in client-facing consulting roles
- Relevant SAP or security certifications are a plus
Technical Skills
- SAP Security and Authorizations
- SAP GRC Access Control
- SAP S/4HANA Security
- SAP Public Cloud Security
- SAP Fiori Security
- Role Design and Role Lifecycle Management
- SoD Risk Analysis and Mitigation
- ARM, ARA, EAM, BRM
- User Access Provisioning
- Audit and Compliance Support
- SAP IAM / Identity Integration
Key Competencies
- Strong problem-solving and troubleshooting ability
- Excellent stakeholder communication
- Ability to work independently and lead security workstreams
- Strong attention to detail and governance mindset
- Ability to balance compliance requirements with business usability
- Mentoring and knowledge-sharing capability
Success Measures
- Secure and compliant SAP role design delivered across projects and support engagements
- Reduced SoD conflicts and improved mitigation coverage
- Timely resolution of authorization and access-related issues
- Successful audit support and compliance adherence
- Efficient and controlled access request and provisioning processes
- Strong collaboration with functional, technical, and compliance stakeholders
