Cyber - SAP Security and GRC Access & Process Control Consultant / Security Engineer II

Deloitte • Tampa, FL

172d • $82,600 - $162,800

About The Position

As a Security Engineer II on Deloitte Cyber’s Enterprise Security team, you will support clients as they address cybersecurity challenges and strengthen controls, manage risk, and pursue secure transformation. The role focuses on SAP security and access governance, including SAP security and GRC Access Control implementations, assessments, and optimization across client environments.

You will work with SAP ECC and SAP S/4HANA security, SAP Fiori, SAP Business Technology Platform, and SAP GRC Access Control capabilities. The work includes designing and deploying roles, configuring access-control capabilities, assessing segregation-of-duties risks, and developing security solutions for custom transactions, tables, programs, reporting, and analytics across complex, multi-country rollout programs. The position requires an average of 50% travel, depending on assigned work and clients. Recruiting for this role ends on 12/31/2026.

Requirements

• Bachelor's degree.
• At least 3 years of experience with SAP S/4HANA Security and SAP Governance, Risk, and Compliance Access Control.
• At least 3 years of experience implementing security for SAP S/4HANA, SAP Fiori, and SAP Business Technology Platform, including requirements gathering, security design, and deployment.
• Experience delivering at least 2 full-cycle SAP S/4HANA security implementations.
• At least 2 years of experience configuring and implementing SAP Governance, Risk, and Compliance Access Risk Analysis, Access Request Management, Emergency Access Management, and Business Role Management.
• At least 2 years of experience building and updating segregation-of-duties rulesets and performing user- and role-level risk analysis in SAP Governance, Risk, and Compliance 12.0.
• Ability to travel 50% on average, based on work performed and clients and industries served.
• Ability to work independently and collaboratively as part of a team.
• Effective written and verbal communication skills, strong interpersonal skills, and a professional demeanor.
• Meticulous attention to detail and quality of work product.
• Ability to build and sustain professional relationships.
• Ability to manage and prioritize multiple tasks in a fast-paced, dynamic environment and meet deadlines.
• Ability to provide clear guidance to others.

Nice To Haves

• Experience in consulting or Big 4 environments.
• Professional certifications such as Certified Information Systems Security Professional, Certified Information Security Manager, or Certified Information Systems Auditor.
• Experience with SAP Identity and Access Governance.
• Experience with cloud security and cloud migration projects.
• Experience executing vulnerability management tools such as Onapsis.
• Experience preparing written deliverables and presenting information to stakeholders.

Responsibilities

• Deliver SAP ECC and SAP S/4HANA security implementations and assessments across client environments.
• Design, build, test, and deploy end-user and IT support roles for SAP S/4HANA, SAP Fiori, and SAP Business Technology Platform environments.
• Configure and support SAP Governance, Risk, and Compliance Access Control capabilities, including Access Risk Analysis, Access Request Management, Emergency Access Management, and Business Role Management.
• Analyze segregation-of-duties risks, support ruleset updates, and perform user- and role-level risk assessments in SAP GRC 12.0.
• Develop security solutions for custom transactions, tables, programs, reporting, and analytics tools across complex, multi-country rollout programs.
• Lead projects or workstreams, manage and prioritize multiple tasks, meet deadlines, and provide clear guidance to others.

Benefits

• May be eligible to participate in a discretionary annual incentive program, subject to program rules and applicable factors.
• Opportunities to build new skills, take on leadership opportunities, and connect and grow through mentorship and formal development programs.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level