SAP Security / GRC Consultant

Job Description SAP Security / GRC Consultant (8+ Years) Role snapshot

Field

Detail

Job title

Senior SAP Security / GRC Consultant

Experience

8+ years in SAP Security, including 4+ years in SAP GRC Access Control

Location

Hyderabad, India (delivery center). hybrid / remote considered

Employment type

Full-time

Travel

UK/EU as projects require

Reports to

SAP Practice Lead, Quadric IT

About Quadric IT

Quadric IT LLC is an SAP and ERP consulting firm headquartered in Lutz, Florida, with a delivery center in Hyderabad, India and a growing UK/EU presence. We help manufacturers, life-sciences and industrial clients implement, upgrade and run SAP S/4HANA and related platforms. Our teams combine deep functional expertise with hands-on delivery across logistics, finance, data and security.

Role summary

We are hiring a Senior SAP Security / GRC Consultant to design, build and run secure, audit-ready role and access frameworks for our clients. You will own SAP Security and GRC Access Control workstreams on S/4HANA implementations, ECC-to-S/4HANA conversions and managed-support engagements. You will work directly with client IT, internal audit and business owners, and mentor junior consultants in our Hyderabad delivery center.

Key responsibilities

SAP Security

• Design and build role concepts (single, composite, derived and business roles) for S/4HANA, ECC, BW/4HANA and Fiori using PFCG.
• Configure Fiori security: catalogs, business groups, spaces and pages, OData service authorizations and launchpad content.
• Manage user administration, CUA, password policies and SU24 authorization defaults.
• Secure S/4HANA and HANA databases: HANA roles, privileges and analytic authorizations.
• Troubleshoot access issues using SU53, ST01/STAUTHTRACE and SUIM; resolve tickets within SLA.
• Lead security workstreams in ECC-to-S/4HANA conversions, including role remediation and SU25 upgrades.
  
  

SAP GRC Access Control

• Implement and support GRC Access Control 12.0 modules: ARA, ARM, BRM and EAM (Firefighter).
• Build and maintain SoD rulesets, mitigating controls and risk analysis for business processes.
• Configure MSMP workflows and BRF+ rules for access request approvals.
• Run periodic User Access Reviews (UAR) and SoD reviews; produce audit-ready evidence.
• Integrate GRC with connected systems, IdM and cloud identity (SAP Cloud Identity Services / IAG) where in scope.
  
  

Audit, compliance and delivery

• Support SOX, GxP, ITGC and internal / external audits with clear controls documentation.
• Prepare design documents, test scripts and cutover plans; lead unit, integration and UAT testing for roles.
• Advise clients on security best practice, least privilege and license optimization.
• Mentor junior consultants and contribute to Quadric IT accelerators, templates and presales estimates.
  
  

Required skills and experience

• 8+ years of hands-on SAP Security experience, with at least 4 years in SAP GRC Access Control (10.x / 12.0).
• 2+ full-lifecycle SAP S/4HANA implementations or conversions in a security lead or senior role.
• Strong command of PFCG, SU24, SU25, SUIM, SU53, ST01/STAUTHTRACE, CUA and user administration.
• Proven Fiori security design: catalogs, groups, spaces/pages and OData services.
• Hands-on GRC configuration: ARA, ARM, BRM, EAM, MSMP workflows, BRF+ and SoD rulesets.
• SAP HANA database security and BW/4HANA analysis authorizations.
• Working knowledge of SOX, ITGC and audit processes; ability to produce audit evidence.
• Bachelor's degree in Computer Science, IT, Engineering or a related field.
• Clear written and spoken English; comfortable presenting to client stakeholders.
  
  

Preferred qualifications

• SAP Certified Technology Consultant SAP S/4HANA System Security, or SAP GRC Access Control certification.
• Experience with SAP Cloud Identity Access Governance (IAG), Identity Authentication / Provisioning (IAS / IPS) and BTP security.
• Exposure to SAP Process Control, Risk Management or SAP Enterprise Threat Detection.
• Security experience for SuccessFactors, Ariba or other SAP cloud solutions.
• Experience in regulated industries (life sciences / GxP, medical devices, manufacturing).
• Familiarity with third-party tools such as SailPoint, Saviynt, Pathlock or Onapsis.
• Prior consulting or onshore offshore delivery experience across US and UK/EU clients.
  
  

Soft skills

• Client-facing confidence: explains risk and controls in business language.
• Ownership mindset: drives issues to closure across time zones.
• Structured documentation and attention to detail.
• Collaborative mentor for junior team members.
  
  

What we offer

• Work on S/4HANA transformation programs for US, UK and EU clients.
• Competitive compensation and performance-linked incentives.
• Paid SAP certification and continuous learning support.
• Flexible hybrid / remote working.
• A founder-led firm where senior consultants shape practice growth and offerings.
  
  

How to apply

Send your resume and a short note on your most relevant S/4HANA security or GRC project to [Confidential Information], with the subject line SAP Security / GRC 8+ Years.

Quadric IT is an equal opportunity employer and welcomes applicants from all backgrounds.