An SAP Security and Audit Consultant reviews SAP access, security controls and audit evidence across SAP landscapes, working with security teams, authorisations consultants, auditors, process owners, compliance stakeholders and implementation partners.

The role is commonly used across SAP S/4HANA, ECC, SAP GRC, Access Control, Process Control and Fiori environments where employers need stronger audit readiness, clearer access evidence, better control ownership and practical remediation of security or compliance findings.

• Reviewing SAP security and audit activity across implementation, migration, rollout or BAU support environments
• Assessing user access, role design, segregation of duties, privileged access, audit logs and security control evidence
• Supporting SAP GRC, Access Control, Process Control, access reviews, audit readiness and remediation activity
• Improving security evidence quality, control ownership, access governance, reporting routines and escalation routes
• Adding SAP security and audit expertise to S/4HANA transformation, ECC change, GRC improvement or audit remediation activity

• Assess SAP security risks, access weaknesses, SoD conflicts, audit findings, log evidence and control gaps
• Review role design, user access, privileged access, security logs, access reports, approval evidence and remediation records
• Work with auditors, security teams, authorisations consultants, process owners, compliance stakeholders and implementation partners
• Support SAP S/4HANA, ECC, SAP GRC, Access Control, Process Control, Fiori and audit log activity where relevant
• Track security findings, access risks, control weaknesses, remediation actions, ownership, due dates and governance reporting
• Prepare audit packs, access review evidence, security reports, control summaries and stakeholder briefing material
• Help leaders make informed decisions on SAP security risk, audit readiness, access control and long-term governance

• SAP security and audit consulting experience
• Strong understanding of SAP S/4HANA, ECC, SAP authorisations, role design and security controls
• Knowledge of SAP GRC, Access Control, SoD, access reviews, security audit logs, control testing and remediation tracking
• Experience with SAP Fiori security, Process Control, audit support, compliance reporting or regulated environments where relevant
• Ability to work with auditors, security teams, process owners, compliance stakeholders and implementation partners
• Clear judgement on access risk, audit evidence, control strength, security impact and practical remediation