Cyber SAP Security and GRC Access & Process Control Senior Consultant / Senior Engineering Management Specialist

1. Job Overview:

Deloitte is hiring a Cyber SAP Security and GRC Access & Process Control Senior Consultant / Senior Engineering Management Specialist to join Deloitte’s Enterprise Security team. The team helps clients strengthen SAP security across enterprise transformation, cloud modernization, and application change initiatives. The Senior Engineering Management Specialist will support SAP-focused security strategy, architecture, access design, control design, and implementation activities across ERP environments. This role works with client and Deloitte teams to address security requirements across SAP platforms, integrations, and transformation programs while helping organizations reduce risk and enable business operations.

Why Join Us:

• Deloitte’s Enterprise Security Offering helps organizations embed security across digital transformation initiatives by securing the technical backbone of the business while enabling change.
• The team supports capabilities across security architecture, secure development and deployment, cyber cloud, application security, SAP security, and security for emerging technologies and connected products.
• Deloitte emphasizes an inclusive culture that empowers people to contribute unique perspectives and supports professional development through on-the-job learning experiences and formal development programs.

Role Purpose:

• Support SAP security strategy, architecture, access design, control design, and implementation activities across SAP environments to reduce risk and enable business operations.

Recruiting for this role ends on 12/31/2026.

2. Key Responsibilities:

• Supporting the design and implementation of SAP security solutions across SAP ECC, SAP S/4HANA, SAP Fiori, and connected applications
• Assessing SAP roles, profiles, and access models to identify segregation of duties, sensitive access, and control gaps
• Translating business process and technical requirements into SAP security requirements, role design approaches, and remediation plans
• Supporting SAP implementation, migration, and transformation efforts by embedding security requirements into project activities and deliverables
• Collaborating with client stakeholders, functional teams, and technical teams on SAP security controls, governance, testing, and deployment readiness

3. Required Qualifications:

• Bachelor’s degree
• Ability to travel 50%, on average, based on the work you do and the clients and industries/sectors you serve.
• Limited immigration sponsorship may be available.

4. Required Skills:

• Ability to work independently and collaborate as part of a team
• Effective written and verbal communication skills
• Meticulous attention to detail and quality of work product
• Ability to build and sustain professional relationships
• Ability to lead projects or workstreams
• Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment
• Strong interpersonal skills and professional demeanor
• Ability to meet deadlines
• Ability to provide clear guidance to others

5. Preferred Qualifications:

• Experience with SAP Access Control, SAP Identity Access Governance, or SAP Cloud Identity Services
• Experience supporting SAP security across SuccessFactors, Ariba, Concur, or SAP Business Technology Platform
• Experience with SAP security control testing, audit support, or compliance programs
• Experience defining SAP security standards, role design methods, or governance procedures
• SAP certifications
• Experience working in consulting or professional services environments

6. Experience Requirements:

• 4+ years of experience in SAP security, SAP controls, or enterprise application security
• 3+ years of experience with SAP ECC, SAP S/4HANA, SAP Fiori, or SAP Governance, Risk, and Compliance (GRC)
• 3+ years of experience designing or supporting role-based access controls, segregation of duties analysis, or sensitive access controls in SAP environments
• 2+ years of experience supporting SAP implementation, migration, upgrade, or transformation programs

7. Additional Job Information:

• Employment type: Full-time
• Work mode: On-site
• Notice period: Not specified in the source text
• Employer-provided location(s): San Francisco, CA; San Francisco County, CA; California, United States. (Posting notes the same job available in 29 locations.)
• Travel requirement: Ability to travel 50%, on average
• Recruiting end date: 12/31/2026
• Application / accommodation instructions: For reasonable accommodations to participate in the recruiting process, contact the Global Call Center (GCC) at USTalentCICInbox@deloitte.com. The posting also references Deloitte recruiting tips and additional recruiting resources on Deloitte careers pages.
• Additional notes included in source: Limited immigration sponsorship may be available. Requisition code: 371179. The wage range disclosed for this role is $105,400 to $207,800 (as stated in the source).