[Hiring] Security Lead @NTT DATA Services

Role Description

The SAP S/4HANA Security Consultant is responsible for designing, implementing, and maintaining robust SAP security frameworks. The role ensures that user access, roles, and authorizations align with business processes, compliance standards, and audit requirements within S/4HANA and associated SAP systems.

Key Responsibilities

• Design and implement SAP S/4HANA security architecture, including roles, profiles, and authorizations.
• Create, maintain, and manage user roles across multiple SAP landscapes (ECC, Fiori, GRC, BW, HANA).
• Perform role design workshops with business process owners and map access requirements.
• Conduct periodic user access reviews and compliance audits (SOX, GDPR, etc.).
• Implement and maintain Fiori catalog, group, and role assignments for users.
• Troubleshoot authorization issues and analyze SU53 logs, ST01 traces, and security dumps.
• Integrate SAP S/4HANA Security with SAP GRC Access Control for risk and compliance management.
• Support system migrations and upgrades by validating roles and performing security testing.
• Ensure adherence to segregation of duties (SoD) principles and remediation of conflicts.
• Prepare and maintain documentation for security policies, processes, and configurations.

Qualifications

• Bachelor’s degree in Computer Science, Information Systems, or related field.
• 5–8 years of SAP Security experience, with at least 2 years in S/4HANA environments.
• SAP Certified Technology Associate – SAP System Security and Authorizations preferred.
• Experience with SAP Cloud Identity Services and SAP BTP Security is an advantage.

Requirements

• Strong understanding of SAP authorization concepts (PFCG, SU24, SU53, SUIM).
• Deep experience with SAP S/4HANA Security, Fiori, and HANA database security.
• Proficiency in SAP GRC Access Control (ARM, ARA, BRM, EAM modules).
• Knowledge of SAML, OAuth, and Single Sign-On (SSO) integrations.
• Strong communication and documentation skills to work with auditors and stakeholders.