SAP GRC and HANA Security Consultant
Who We Are At Kyndryl, we run and reimagine the mission-critical technology systems that drive advantage for the world’s leading businesses. We are at the heart of progress; with proven expertise and a continuous flow of AI-powered insight, enabling smarter decisions, faster innovation, and a lasting competitive edge. For our people—Kyndryls—that means doing purposeful work that powers human progress. Join us and experience a flexible, supportive environment where your well-being is prioritized and your potential can thrive. The Role We are looking for an SAP GRC and HANA Security Consultant to design, implement, and govern access controls across our SAP landscape. This role sits at the intersection of technical security administration and compliance: you will build and maintain role architecture across S/4HANA, HANA database, and Fiori, run our GRC Access Control platform end to end, and act as the primary technical contact for internal and external auditors on SAP access matters. This is a hands-on position for someone who is equally comfortable writing an analytic privilege in HANA Studio, remediating a segregation-of-duties conflict in ARA, and explaining both to a non-technical control owner.
Job Details
Responsibilities
- Configure, administer, and support SAP GRC Access Control 10.1/12.0 across all four modules: Access Risk Analysis (ARA), Access Request Management (ARM), Business Role Management (BRM), and Emergency Access Management (EAM/Firefighter).
- Maintain and customize the SoD ruleset — add custom risks, functions, and organizational rules; apply SAP-delivered ruleset updates and assess landscape impact.
- Design and maintain MSMP workflows, BRF+ rules, and approval paths for access requests and role change management.
- Perform periodic risk analysis at user, role, and profile level; drive remediation and design compensating/mitigating controls with business process owners.
- Administer User Access Reviews (UAR), SoD Review, and Firefighter log reviews; track completion and escalate exceptions.
- Support GRC Process Control, Risk Management, and Audit Management where in scope, and evaluate migration to SAP Cloud Identity Access Governance (IAG).
Requirements
- Bachelor's degree in Computer Science, Information Systems, or a related field, or equivalent practical experience.
- 5+ years of hands-on SAP security experience, including at least 3 years with SAP GRC Access Control 10.x or 12.0.
- Demonstrated hands-on experience with SAP HANA security administration — roles, privileges, analytic privileges, and audit policies — not solely at the application layer.
- Strong working knowledge of PFCG role design, authorization objects, SU24 maintenance, and trace-based troubleshooting.
- Experience with S/4HANA and Fiori security concepts, including catalog and space/page design.
- Practical experience supporting SOX ITGC or equivalent audit and compliance requirements in an SAP environment.
- Proven ability to analyze and remediate segregation-of-duties conflicts and design mitigating controls.
- Clear written and verbal communication, with the ability to explain technical access risk to business and audit stakeholders.
Skills & Technologies
Education Level
No degree required
| Location | Active listings |
|---|---|
| Espoo, Finland | 13 |
| Remote - Global | 12 |
| Jyväskylä, Finland | 3 |
| Role type | Active listings |
|---|---|
| Software Engineer | 5 |
| Human Resources Specialist | 3 |
| Business Analyst | 2 |
| Solution Architect | 2 |
| Mainframe Developer | 2 |
| Program Manager | 1 |
| Cyber Security Product Manager | 1 |
| Compliance and Audit Readiness Lead | 1 |
| Contract Proposal Manager | 1 |
| Payment Product Management | 1 |
| Java Developer | 1 |
| Test Manager | 1 |
| Project Manager | 1 |
| Security Consultant | 1 |
| Test Automation Specialist | 1 |
| Chief Technology Officer | 1 |
| Role level | Active listings |
|---|---|
| Mid-Level | 18 |
| Senior | 4 |
| Manager | 2 |
Related Opportunities
Discover more opportunities that match your interests and skills