Senior SAP Security Consultant at IBM · Quezon…

A career in IBM Consulting is built on long-term client relationships and close collaboration worldwide. You’ll work with leading companies across industries, helping them shape their hybrid cloud and AI journeys. With support from our strategic partners, robust IBM technology, and Red Hat, you’ll have the tools to drive meaningful change and accelerate client impact. At IBM Consulting, curiosity fuels success. You’ll be encouraged to challenge the norm, explore new ideas, and create innovative solutions that deliver real results. Our culture of growth and empathy focuses on your long-term career development while valuing your unique skills and experiences. Key Responsibilities: Lead regional shift handoffs, queue management, SLA adherence, escalations, quality reviews, and stakeholder communications. Manage and resolve complex SAP S/4HANA and SAP GRC access tickets, including user provisioning, role assignments, SoD analysis, authorization errors, firefighter/emergency access, expired access, and approval/workflow defects. Analyze and troubleshoot SAP security and authorization issues using appropriate tools and transaction codes, including PFCG, SU01, SU53, and SUIM. Review access requests and changes for accuracy and completeness before closure, ensuring: - Correct role and access level - Correct business approver - Correct validity period - Completed and acceptable SoD analysis - Required audit evidence attached - No unmanaged security-matrix exceptions Design, maintain, and support SAP HANA/S/4HANA security roles and authorization concepts in alignment with business requirements and security standards. Support SAP GRC Access Risk Analysis (ARA), Access Request Management (ARM), and Emergency Access Management (EAM) processes. Investigate recurring access and authorization issues, perform root-cause analysis (RCA), and recommend sustainable corrective actions. Maintain regional knowledge bases, standard operating procedures, and security runbooks to improve operational consistency and resolution efficiency. Identify recurring incidents and operational gaps and feed them into the role design, GRC, process improvement, and automation backlogs. Manage high-volume security support queues while balancing incident priority, SLA commitments, business impact, and resource availability. Coordinate escalations with functional, technical, Basis, application, and business teams to drive timely resolution. Support audit and compliance activities by maintaining accurate access records, approval documentation, SoD results, and audit evidence. Communicate security risks, ticket status, operational issues, and escalations effectively to regional and business stakeholders. Contribute to continuous improvement of SAP security operations, controls, workflows, and automation. Must-Have Skills: 8+ years of hands-on SAP Security experience, with strong experience in SAP S/4HANA access operations. Strong expertise in SAP GRC, particularly: - Access Risk Analysis (ARA) - Access Request Management (ARM) - Emergency Access Management (EAM / Firefighter) Strong working knowledge of SAP authorization and user administration using PFCG, SU01, SU53, and SUIM. Proven experience handling high-volume SAP security support operations and managing competing priorities. Strong understanding of SAP role design, authorization concepts, access provisioning, and access governance. Experience with Segregation of Duties (SoD) analysis and remediation. Demonstrated experience in shift leadership, queue management, SLA management, escalations, and regional handoffs. Strong root-cause analysis (RCA) and problem-management skills, with the ability to identify recurring issues and drive permanent solutions. Experience with backlog management, operational reporting, and continuous improvement initiatives. Strong understanding of audit and compliance requirements, including maintaining appropriate access evidence and documentation. Ability to perform detailed access-quality reviews and validate roles, approvers, validity periods, SoD results, evidence, and security-matrix exceptions. Excellent written and verbal business communication skills, including the ability to communicate effectively with regional stakeholders and senior business teams. Strong documentation skills with experience creating and maintaining KB articles, SOPs, and operational runbooks. Nice-to-Have Skills: Exposure to SAP SuccessFactors and SAP Fieldglass security/access management. Awareness of SAP Identity Authentication Service (IAS) and SAP Identity Access Governance (IAG). Experience supporting or troubleshooting BRF+ workflows and SAP GRC approval workflows. Experience using ServiceNow dashboards for ticket, queue, SLA, and operational performance management. Working knowledge of SAP BPC/BW security and related authorization concepts. Experience with SAP security automation and opportunities for reducing manual access-management activities. Familiarity with SAP cloud security and identity/access-management concepts. SAP Security, S/4HANA, or GRC-related certifications. Philippines Consulting Hybrid Professional QUEZON CITY, PH (0891) IBM Solutions Delivery, Inc.