Senior SAP GRC Access Control & Security Consultant (Hybrid, Austin Texas)

Wipro•Austin, TX

2d•Hybrid

About The Position

Wipro Limited is seeking an experienced Senior SAP GRC Consultant to assess, strategy & design, configure, implement, audit, and provide compliance support for SAP Security (S4HANA, Fiori, SCM etc.) & GRC AC solutions. This role requires strong expertise in access governance, Segregation of Duties (SoD), emergency access management, audit compliance, SAP role design, and stakeholder collaboration across complex SAP landscapes. The position is hybrid, requiring 3 days in the office per week in Austin, Texas.

Requirements

Strong hands-on experience with SAP GRC Access Control 10.x/12.0 modules, including ARA, ARM, EAM, and BRM.
Deep understanding of SoD concepts, access risk analysis, mitigation controls, audit evidence, SOX/ITGC compliance, and SAP security governance.
Experience with SAP role design, PFCG, SU24, SU25, authorization objects, user master administration, and troubleshooting complex authorization issues.
Working knowledge of SAP S/4HANA, Fiori security, SAP BTP security, IAS, HANA security, and integrations with identity and access management platforms.
Ability to work with global stakeholders, manage priorities, support audits, document solutions, and provide senior-level guidance to technical and functional teams.
8+ Years with minimum two E2E SAP GRC AC implementations
SAP GRC - Governance-Risk-Compliance

Responsibilities

Provide business and process consulting support for access governance requirements, translate control objectives into SAP GRC Access Control process designs, and recommend practical improvements aligned with business operations for hybrid SAP landscape.
Review and audit SAP GRC Access Control processes across SAP applications and environments, including access request workflows, risk analysis, mitigating controls, firefighter usage, and compliance evidence readiness.
Implement, configure, and support SAP GRC Access Control modules, including Access Risk Analysis (ARA), Emergency Access Management (EAM/Firefighter), Access Request Management (ARM), and Business Role Management (BRM).
Perform user- and role-level risk analysis, identify and remediate SoD conflicts, maintain customized rule sets for business processes, custom transactions, and regulatory requirements.
Creation and Management of GRC Connectors and related configuration, GRC Role master data maintenance, workflow configuration etc.
Configure GRC Firefighter, maintain Owners and Firefighter log monitor and related troubleshooting.
Define, maintain, and monitor mitigating controls for access risks.
Support SAP GRC rule-set design, rule maintenance, risk validation, and continuous improvement of access governance processes.
Design, build, test, and maintain SAP security roles, authorization objects, profiles, and role concepts across SAP ECC, S/4HANA, Fiori, HANA, and integrated SAP applications.
Provide end-to-end Fiori authorization support, including catalogs, groups, spaces, pages, OData services, Web Dynpro applications, and tile-to-authorization analysis.
Support SAP BTP security activities from GRC User provisioning perspective including IAS integration, role collection design, group mapping, and user access administration across cloud environments.
Manage user provisioning, role assignments, authorization troubleshooting, security log monitoring, production support, and post-go-live hypercare activities.
Lead or support SAP security and GRC implementation, upgrade, migration, integration, testing, cutover, and support activities across project and managed-services environments.
Collaborate with business stakeholders, functional teams, technical teams, and client leadership to define secure access models, resolve authorization issues, and ensure deployment readiness.
Provide technical leadership, mentoring, documentation, status reporting, and guidance to project teams while ensuring adherence to security, compliance, and change-management standards.
Partner with internal controls, audit, compliance, and business teams to support SOX, ITGC, and internal/external audit reviews by providing evidence, analysis, and remediation support.