Security Consultant – SAP GRC and Access Management

About the role

IBM Consulting is seeking a Security Consultant to protect SAP landscapes and ensure compliance with global regulations. You will work with leading enterprises to design, implement, and maintain secure SAP environments while supporting audit and regulatory requirements.

Key responsibilities

• Protect sensitive business data across finance, HR, and supply‑chain modules.
• Design and manage user access, role‑based access control (RBAC) and segregation of duties (SoD) in SAP.
• Define authorization roles and profiles, applying the principle of least privilege.
• Integrate SAP with identity providers for SSO and MFA, and manage authentication mechanisms.
• Translate regulatory requirements (SOX, GDPR, LGPD, ISO 27001, NIST) into SAP controls and support audit readiness.
• Conduct risk analyses, remediation, and documentation throughout the audit lifecycle.

Required profile

• Bachelor’s degree or equivalent experience.
• Strong knowledge of Governance, Risk & Compliance (GRC) frameworks and internal control standards (SOX, COSO).
• Experience with regulatory and data‑privacy standards such as GDPR, LGPD, ISO 27001, and NIST.
• Ability to communicate technical risks in business terms and lead governance meetings.

Required skills

• SAP security and access‑management concepts.
• Role‑Based Access Control (RBAC) and Segregation of Duties (SoD).
• Single Sign‑On (SSO) and Multi‑Factor Authentication (MFA) integration.
• Governance, Risk & Compliance (GRC) methodologies.
• Regulatory frameworks: SOX, GDPR, LGPD, ISO 27001, NIST, COSO.
• Audit lifecycle management and control documentation.