Sr. Engineer, SAP Security (Mumbai)

Job Summary The Sr. Engineer, SAP Security is responsible for the design and implementation of SAP authorization concepts including role design (Single/Composite/Derived), securing custom transactions, maintaining SU24 entries, and enforcing SOX and IT general controls compliance. This position reports to the Manager, SAP Security and is part of the Digital Product Development and will be located in Pune, India and will be an onsite role. In this role, you will have the opportunity to: - SAP authorization concepts, including role design (Single/Composite/Derived roles), securing custom transactions, maintaining SU24, and ensuring compliance with SOX and IT general controls. - SAP security across modules and Basis components, including ECC and S/4. Familiarity with at least one S/4 implementation cycle, along with GRC Access Control configuration (10/10.1/12), BRF+, and SAP GRC AC components (ARA, EAM, ARM, BRM). - Developing and maintaining SAP roles to ensure Segregation of Duties (SoD), clear access controls, and adherence to security and audit requirements. Good understanding of SOX requirements and developing standard work in security space to enforce SOX standards. Participates in audits (SOX and others) and enforces effective control and monitoring processes. - Thorough understanding of business processes and dependencies between SAP modules and systems, working cross-functionally with teams (Functional, Developers, BASIS) to support user access needs, issue resolution, and system monitoring. - Develop and refining security processes, assist in testing and implementing system changes, and contribute to documentation, blueprinting, and user requirements gathering to enhance security efficiency and compliance. The essential requirements of the job include: - Bachelors degree in computer science, Information Systems, or a related field. - 7+ years of SAP Security experience with SAP authorizations (ERP and HANA) as a consultant or worked in a customer-facing environment (Internal or External) with at least 2 years of SAP GRC in Access control (12.x) - Understanding of Business Rule Framework, BRF+. Knowledge and experience of initial GRC Access Control 10/10.1/12 configuration, knowledge and experience of configuring SAP GRC AC Components (ARA, EAM, ARM, BRM) - Experience of working with Internal and External Audit - SAP security audit skills. - Knowledge of SAP Public Cloud security integration (SAP BTP) and access risks. Travel, Motor Vehicle Record & Physical/Setting Requirements - Ability to travel - up to 10 % travel, overnight, within territory or locations - Must have a valid driver's license with an acceptable driving record It would be a plus if you also possess previous experience in: - Exposure to ITIL Framework. - Awareness of Information Security principles. Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying. .