Join EY and build a career as unique as you are, leveraging global scale, support, and an inclusive culture to become your best self. Your unique perspective is crucial in helping EY achieve even greater success. Join us to create an exceptional personal experience and contribute to a better working world.

This role focuses on SAP Security, GRC Access Control, and Identity Management within modern SAP landscapes, including SAP S/4HANA on RISE, SAP GRC, SAP IDM, SAP BTP, Ariba, and SuccessFactors. The primary responsibilities involve end-to-end user access management, role lifecycle, GRC operations, IDM provisioning, risk analysis, audits, and access governance across a complex SAP environment.

Manage end-to-end SAP user access, including creation, modification, and revocation through approved processes. Own the SAP role lifecycle from gathering requirements to design, build, testing, and ongoing maintenance.

Administer SAP GRC Access Control modules (ARA, EAM, ARM) and support GRC Process Control for CCM updates and control monitoring. Manage the SAP identity lifecycle in SAP IDM, handling provisioning, deprovisioning, and reconciliation.

Implement and operate user access reviews, firefighter reviews, and audit evidence packs. Design, maintain, and govern SoD and critical access rulesets. Perform SAP native security assessments to identify risks in authorizations, users, and configurations. Support SAP security activities for country rollouts and release management.

A strong foundation in SAP Security, SAP GRC Access Control, and SAP user administration is essential. Proficiency in SAP role design, build, UAT support, and transport management is required.

Demonstrated experience with SAP GRC ARA, EAM, ARM, and risk ruleset management, along with SAP Firefighter ID management and emergency access governance. Proven ability to implement and operate SAP user access reviews and access certification processes is crucial.

Familiarity with SAP IDM provisioning, workflows, and identity lifecycle management. Knowledge of SAP S/4HANA security, Fiori security, authorization objects, and business roles. Understanding of SAP GRC Process Control and Continuous Control Monitoring is beneficial. Experience supporting internal and external audits, SOX, and ITGC compliance reviews is expected, alongside strong documentation and issue resolution skills.