Key Responsibilities
SAP Security Administration
- Design, build, and maintain SAP security roles and authorization concepts for SAP ECC, SAP S/4HANA, SAP BW/4HANA, SAP BTP, SAP Public Cloud, and other SAP applications.
- Administer user provisioning, role assignments, privileged access, and authorization troubleshooting.
- Develop and maintain role design standards, naming conventions, and security governance processes.
Role Design & Authorization Management
- Design and implement single, composite, derived, and Fiori business roles.
- Perform authorization analysis using SU53, STAUTHTRACE, and security trace tools.
- Support organizational changes, new business processes, and application implementations through secure role design.
- Conduct role optimization and cleanup activities to improve security and reduce risk.
SAP GRC & SAP IAG Implementation
- Participate in the implementation, configuration, and support of SAP GRC Access Control and SAP Cloud Identity Access Governance (IAG).
- Configure and support:
- Access Risk Analysis (ARA)
- Access Request Management (ARM)
- Business Role Management (BRM)
- Emergency Access Management (EAM)
- User Access Review (UAR)
- Perform Segregation of Duties (SoD) analysis and assist with risk remediation and mitigating controls.
- Support periodic access certifications and audit activities.
