SAP Security GRC Consultant

Avensys is a reputed global IT professional services company headquartered in Singapore. Our service spectrum includes enterprise solution consulting, business intelligence, business process automation and managed services. Given our decade of success we have evolved to become one of the top trusted providers in Singapore and service a client base across banking and financial services, insurance, information technology, healthcare, retail and supply chain.

We are currently looking to hire a SAP Security GRC Consultant - DB & OS Security. This is an exciting opportunity to expand your skill set, achieve job satisfaction and work-life balance. More details as below.

This role requires deep technical expertise in SAP application security, database security (HANA, Oracle, etc.), and OS-level hardening to ensure robust protection of critical enterprise systems

Location : India (Remote)

Type : Contract, 3 months extendable

Experience : 8+ years

Shift - 12 to 9 pm IST

Job Description :

Looking for a highly skilled Senior SAP Security Expert to lead the design, implementation, and management of security controls across our SAP landscape.

This role requires deep technical expertise in SAP application security, database security (HANA, Oracle, etc.), and OS-level hardening to ensure robust protection of critical enterprise systems.

The ideal candidate is a hands-on expert who can act as a trusted advisor, drive security improvements, and guide cross-functional teams in aligning with industry best practices, compliance requirements, and enterprise risk standards.

Key Responsibilities:

1. SAP Application Security:

• Architect and manage enterprise-wide role design, role remediation, and segregation of duties (SoD) mitigation strategies.
• Lead implementation and optimization of SAP GRC Access Control, Firefighter ID, and audit reporting.
• Define and enforce SAP security governance policies and standards across all modules (ECC, S/4HANA, BW, Fiori, CRM, etc.).
• Perform root cause analysis on authorization issues and provide mentoring to junior security administrators.
• Collaborate with business process owners, internal audit, and compliance teams to maintain secure workflows.

2. Database Security:

• Oversee security architecture and controls for SAP HANA, Oracle, SQL Server, and other underlying databases.
• Ensure implementation of encryption, user access management, audit logging, and vulnerability remediation at the DB level.
• Support secure data integrations and real-time replication solutions (e.g., SLT, SDA, Smart Data Integration).

3. Operating System & Infrastructure Security:

• Define and review OS-level hardening standards for Linux/Unix/Windows systems running SAP applications.
• Work with infrastructure and Basis teams to implement secure configurations (e.g., ssh, sudo, sudoers), OS patching, and file system protection.
• Evaluate and enforce transport layer security for SAP-related communications (HTTPS, SNC, SFTP, SAProuter).
• Participate in network architecture discussions to ensure secure firewall and DMZ configurations for SAP systems.

WHAT'S ON OFFER:

You will be remunerated with an excellent base salary and entitled to attractive company benefits. Additionally, you will get the opportunity to enjoy a fun and collaborative work environment, alongside a strong career progression.

To submit your application, please apply online or email your UPDATED CV in Microsoft Word format to Swati.J@aven-sys.com Your interest will be treated with strict confidentiality.

CONSULTANT DETAILS:

Consultant Name : Swati Jaiswal

Avensys Consulting Pte Ltd

Email : Swati.J@aven-sys.com

Whatsapp : +65 6761 9826

Privacy Statement:

We take your personal data protection seriously and adhere to both EU and local data protections regulations.

Upon submission of your CV, you grant Avensys Consulting permission to retain your personal information in our electronic database, unless you specify otherwise. This data will be used to evaluate your suitability for current and potential job openings within our organization. Should you wish to have your personal data removed at any point, a simple notification to us will suffice.

Rest assured, we will not disclose your personal information to any third parties, and we remain steadfast in our commitment to providing equal opportunities to all applicants.