Consultant | SAP GRC PC | Mumbai | SAP

Job description

Job requisition ID :: 106049 Date: Jun 12, 2026 Location: Mumbai Designation: Consultant Entity: Deloitte Touche Tohmatsu India LLP **Job Description – SAP Security Consultant** **Position Title:** SAP Security Consultant **Location:** Mumbai **1. Role Summary** The SAP Security Consultant is responsible for designing, implementing, reviewing, and managing SAP security solutions across S/4HANA and Fiori. The role ensures secure access, adherence to SoD principles, compliance with audit requirements, and smooth execution of security activities throughout all project phases. **2. Key Responsibilities** **A. SAP Security Design & Build** - Design SAP roles using task‑based and activity‑based methodology - Develop and manage roles for S/4HANA, Fiori, MM, SD, FI/CO modules - Create and maintain authorization objects, roles, profiles, and catalogs - Configure and manage Fiori catalogs, groups, spaces, and pages - Maintain SU24 proposals and enrich authorization defaults - Build and manage business roles and system/service user roles. - Maintain security across SAP GUI, Fiori Launchpad, and OData services **B. Role Review & Compliance** - Review roles periodically to ensure least‑privilege access and SoD compliance - Detect and remediate over‑authorizations or conflict‑prone roles - Ensure alignment with audit guidelines and documentation standards - Ensure adherence to naming conventions, governance rules, and security design principles **C. Security Troubleshooting** - Resolve authorization errors using SU53, SU56, ST01, and STAUTHTRACE - Troubleshoot Fiori issues such as blank screens, metadata errors, and service activation failures - Coordinate with Basis for transport movement, cache refreshes, SICF activation, and OData validations - Analyse system logs (SM20, SM21, ST22) to identify and address security gaps **3. Required Skills & Competencies** **Technical Skills** - Strong experience in SAP Security for ECC and S/4HANA - Working knowledge of SAP Fiori Launchpad & app‑level security - Understanding of OData services, CDS views, and SAP UI5 security concepts - Knowledge of Basis–Security dependencies: SICF, PFCG, SU24, STAUTHTRACE - Strong understanding of Segregation of Duties (SoD) and audit frameworks Education: B.tech or BE