SAP Security Consultant - Contract - Outside IR35

Role Overview:

We are looking for an experienced SAP Security Consultant with a strong focus on role design, build, and maintenance across multiple SAP systems. The ideal candidate will have deep hands-on experience with SAP authorization concepts, GRC Access Control, and security role development to ensure a secure, compliant, and efficient SAP environment.

You will work closely with functional, technical, and business teams to design, build, and maintain security roles, perform risk and SoD analysis, and manage access requests through SAP GRC.

Key Responsibilities:

• Design, build, test, and deploy SAP security roles and authorizations across SAP S/4HANA, ECC, BW/4HANA, Fiori, and other integrated systems.

• Configure and maintain SAP GRC Access Control (ARA, ARM, BRM, EAM) to support role provisioning and risk management.

• Conduct Segregation of Duties (SoD) analysis, identify risks, and implement mitigation controls.

• Perform role remediation and redesign as part of system upgrades, new implementations, and ongoing optimization.

• Support and manage GRC workflow approvals, Firefighter access, and access requests.

• Troubleshoot and resolve authorization issues (SU53, ST01, SUIM, etc.) in collaboration with functional teams.

• Maintain role documentation, security design guides, and access matrices.

• Work with auditors and compliance teams to provide evidence and support for security and compliance reviews.

• Ensure consistency and standardization of roles across different environments (DEV, QA, PROD).

• Support security testing, transports, and cutover activities during projects and go-lives.

Required Skills & Experience:

• 5+ years of hands-on experience in SAP Security and GRC.

• Proven experience designing and building roles in SAP ECC and/or S/4HANA.

• Strong understanding of SAP authorization concepts (object-level security, derived roles, composite roles, etc.).

• In-depth knowledge of SAP GRC Access Control (10.x or 12.x) - ARA, ARM, BRM, and EAM modules.

• Experience with SAP Fiori and HANA DB security (catalogs, spaces, privileges, analytical privileges).

• Proficiency in troubleshooting authorization issues and security transports.

• Solid understanding of SoD frameworks, compliance requirements, and audit readiness.

• Experience working with functional teams (FI, MM, SD, HR, etc.) to translate business requirements into secure role designs.