Join EY and build a career tailored to you, leveraging global scale, support, and an inclusive culture. We seek an experienced SAP Security, GRC, and Identity Access Management professional to oversee user access, role design, identity lifecycle, and access governance across a sophisticated SAP environment. This role supports SAP S/4HANA on RISE, SAP GRC, SAP IDM, SAP BTP, Ariba, SuccessFactors, BW/BW4HANA, and other integrated SAP applications.

The position focuses on managing SAP user access, designing and maintaining roles, overseeing GRC operations, conducting risk analyses, managing emergency access, performing audits, and ensuring security operations. The ideal candidate will demonstrate strong process discipline and a commitment to audit-ready execution for all run, change, and project activities.

Key responsibilities include end-to-end SAP user access management, encompassing creation, modification, and revocation via approved processes. You will own the SAP role lifecycle, from requirement gathering and design through build, testing, transport, and ongoing maintenance.

Manage SAP GRC Access Control functions (ARA, EAM, ARM) and support SAP GRC Process Control for CCM updates and control monitoring. Oversee SAP IDM for identity lifecycle, provisioning, deprovisioning, and connector issue resolution.

Implement and operate user access reviews, firefighter reviews, and audit evidence packs. Design, maintain, and govern SoD and critical access rulesets. Assess SAP native security risks, including authorizations, user, and privileged access.

Support SAP security for country rollouts and release activities, gathering local requirements and ensuring alignment with global standards. Conduct SAP native security assessments and provide support for internal and external audits.

We require strong hands-on experience in SAP Security, SAP GRC Access Control, and SAP user administration, including role design, build, UAT support, and production deployment.

Proficiency in SAP GRC ARA, EAM, ARM, and risk ruleset management is essential. Experience with SAP Firefighter ID management, log review, and emergency access governance is also necessary.

The role demands experience in implementing and operating SAP user access reviews and quarterly access certification processes. Familiarity with SAP IDM provisioning, workflows, connectors, and identity lifecycle management is required.

Understanding of SAP S/4HANA security, Fiori security, authorization objects, and business role concepts is crucial. Knowledge of SAP GRC Process Control and Continuous Control Monitoring, along with experience supporting audits (SOX, ITGC, compliance), is expected.

Excellent documentation, stakeholder management, evidence management, and issue resolution skills are paramount for this role.