Syntax is a leading Managed Cloud Provider for Mission Critical Enterprise Applications and has been providing comprehensive technology solutions to businesses of all sizes since 1972. Syntax has undisputed strength to implement and manage ERP deployments (Oracle, SAP) in a secure and resilient private, public or hybrid cloud. With strong technical and functional consulting services, and world-class monitoring and automation, Syntax serves some of North America’s largest corporations across a diverse range of industries. Syntax has offices worldwide, and partners with Oracle, SAP, AWS, Microsoft, IBM and other global technology leaders.
Title: SAP Security Consultant
Experience Level: Senior Consultant
Job Summary
We are seeking a Senior SAP Security and GRC Access Control Consultant with strong hands-on experience in SAP Security, SAP GRC Access Control, S/4HANA, and SAP Public Cloud environments. This role will be responsible for designing, implementing, and supporting secure access models across SAP landscapes while ensuring compliance, segregation of duties, audit readiness, and alignment with business and regulatory requirements.
The ideal candidate brings deep expertise in SAP authorization concepts, GRC processes, and modern SAP cloud security models, and can work closely with functional, Basis, audit, and business teams in complex delivery environments.
Key Responsibilities
- Design, build, and support SAP security roles and authorization concepts across SAP systems including S/4HANA and SAP Public Cloud
- Lead implementation and support of SAP GRC Access Control components, including:
- Access Risk Analysis (ARA)
- Access Request Management (ARM)
- Emergency Access Management (EAM / Firefighter)
- Business Role Management (BRM)
- Perform Segregation of Duties (SoD) analysis, risk identification, remediation planning, and compliance reporting
- Develop and maintain robust role design strategies, including single, composite, and derived roles
- Support SAP Fiori security, including catalogs, spaces, pages, and business roles where applicable
- Manage user provisioning, access requests, role changes, and approval workflows through GRC processes
- Maintain and update rulesets, risk matrices, mitigating controls, and governance processes
- Troubleshoot authorization issues using standard SAP tools and techniques such as role analysis and user authorization tracing
- Partner with project, AMS, audit, compliance, and business stakeholders to support security and controls requirements
- Support S/4HANA transformation, implementation, or upgrade projects with strong focus on secure role and access design
- Ensure access management processes are aligned with internal policies, compliance standards, and audit expectations
- Provide guidance and mentoring to junior consultants and project teams on SAP security and GRC best practices
Required Qualifications
- Bachelor’s degree in Information Technology, Computer Science, Information Security, or a related field
- 8+ years of experience in SAP Security and Authorizations
- 5+ years of hands-on experience in SAP GRC Access Control
- Strong experience with SAP S/4HANA security architecture
- Demonstrated experience with SAP Public Cloud security and access concepts
- Strong working knowledge of SAP authorization design, role administration, and access governance
- Proven experience with SoD analysis, risk remediation, and audit support
- Hands-on experience with Fiori security concepts
- Strong troubleshooting and analytical skills for resolving authorization and access issues
- Experience working in global support, consulting, AMS, or project delivery environments
- Strong written and verbal communication skills
Preferred Qualifications
- Experience with RISE with SAP environments
- Knowledge of SAP BTP security concepts
- Experience with SAP Identity Authentication Services (IAS) and Identity Provisioning Services (IPS)
- Exposure to external IAM / IGA solutions such as SailPoint, Saviynt, or similar tools
- Experience supporting compliance frameworks such as SOX, ITGC, or GDPR
- Prior experience in client-facing consulting roles
- Relevant SAP or security certifications are a plus
Technical Skills
- SAP Security and Authorizations
- SAP GRC Access Control
- SAP S/4HANA Security
- SAP Public Cloud Security
- SAP Fiori Security
- Role Design and Role Lifecycle Management
- SoD Risk Analysis and Mitigation
- ARM, ARA, EAM, BRM
- User Access Provisioning
- Audit and Compliance Support
- SAP IAM / Identity Integration
Key Competencies
- Strong problem-solving and troubleshooting ability
- Excellent stakeholder communication
- Ability to work independently and lead security workstreams
- Strong attention to detail and governance mindset
- Ability to balance compliance requirements with business usability
- Mentoring and knowledge-sharing capability
Success Measures
- Secure and compliant SAP role design delivered across projects and support engagements
- Reduced SoD conflicts and improved mitigation coverage
- Timely resolution of authorization and access-related issues
- Successful audit support and compliance adherence
- Efficient and controlled access request and provisioning processes
- Strong collaboration with functional, technical, and compliance stakeholders
Why Syntax?
Become a part of our success story and work in a company with exciting innovation projects that are causing a stir across the industry. We recently launched one of the world's most advanced manufacturing facilities based on SAP S/4HANA Cloud and SAP Digital Manufacturing Cloud for Execution - for Smart Press Shop, a pioneering joint venture between Porsche and forming specialist Schuler.
- Competitive, above-average compensation
- Global tourist: With us, you can also work from abroad from time to time
- Flexible working time models, home office
- Attractive benefits, e.g. company pension scheme or various health offers
- A modern environment in which the "you" is part of it
- Open feedback culture, flat hierarchies and a motivated team
- Individual career planning with continuous training and coaching on the job
You see a personal challenge in this responsible task? Apply now - and become part of the SYNTAX team!
