Join EY and build a career that's as unique as you are. Leverage global scale, support, and an inclusive culture to achieve your full potential. Your unique perspective is invaluable in helping EY evolve. Together, we can create an exceptional experience for yourself and a better working world for everyone.

We are seeking an experienced SAP Security, GRC, and Identity Access Management professional. This role involves managing end-to-end SAP user access, role design, identity lifecycle, and access governance across a complex SAP landscape. Support will be provided for SAP S/4HANA on RISE, SAP GRC Access Control and Process Control, SAP IDM, SAP BTP, Ariba, SuccessFactors, BW/BW4HANA, and other integrated SAP applications.

Key responsibilities include managing SAP user access, from creation to revocation, and owning the SAP role lifecycle. Administer SAP GRC Access Control processes (ARA, EAM, ARM) and support SAP GRC Process Control for CCM updates. Manage the identity lifecycle in SAP IDM, including provisioning and deprovisioning. Implement and operate user access reviews, conduct firefighter reviews, and manage audit evidence. Design, maintain, and govern SoD and critical access rulesets. Assess SAP native security, including authorization, user, and privileged access risks. Provide SAP security support for country rollouts and release activities.

Further responsibilities encompass handling SAP user ID management, supporting access provisioning via SAP IDM and GRC workflows, and managing emergency access requests. You will also be responsible for designing, building, testing, and maintaining SAP security roles for various SAP platforms, gathering requirements from business process owners, and supporting role redesign and cleanup initiatives. GRC administration involves configuring workflows, performing risk analysis, and troubleshooting provisioning failures. Managing firefighter IDs, reviewing logs, and coordinating access certifications are also critical aspects of this role. Finally, you will support SAP GRC Process Control operations, manage CCM updates, and troubleshoot identity lifecycle processes in SAP IDM.

This role requires strong hands-on experience in SAP Security, SAP GRC Access Control, and SAP user administration. Proficiency in SAP role design, build, UAT support, transport management, and production deployment is essential. A solid working knowledge of SAP GRC ARA, EAM, ARM, and risk ruleset management is expected. Experience with SAP Firefighter ID management, log reviews, and emergency access governance is necessary. You should also have experience implementing and operating SAP user access reviews and quarterly access certification processes. Familiarity with SAP IDM provisioning, workflows, connectors, and identity lifecycle management is required. Understanding of SAP S/4HANA security, Fiori security, authorization objects, and business role concepts is crucial. Knowledge of SAP GRC Process Control and Continuous Control Monitoring is beneficial. Experience supporting SAP internal and external audits, SOX, ITGC, and compliance reviews is also important, along with strong documentation, stakeholder management, evidence management, and issue resolution skills.