SAP GRC and IAG Consultant at Bristlecone · Bengaluru (Bangalore) · 6 - 10 years · ₹18L - ₹24L / yr · Posted 28 Oct 2025

About the Role:
We are seeking an expert in SAP GRC Access Control & IAG. The candidate will be responsible for integrating SAP GRC with cloud-based applications, as well as managing role import/export and ensuring effective risk analysis.
Responsibilities:
- Hands-on experience in integrating SAP GRC with both cloud-based and non-SAP systems using IAG Bridge.
- Lead and implement SAP IAG Bridge from a security perspective.
- Perform troubleshooting, root cause analysis, and resolution of IAG – GRC Bridge connectivity issues.
- Manage provisioning workflows for cloud applications and on-premise systems.
- Configure IPS Properties for Source, Target, and Proxy systems.
Key Skills:
Good knowledge of IAM related protocols such as SCIM, SAML, OAuth, and Kerberos.
Requirements:
- Degree in Engineering with over 8 years of hands-on implementation of Core SAP GRC and IAG, BTP Modules.
- Experience as a Senior Consultant on large SAP implementations.
Behavioral Requirements:
- Strong commitment and determination to work towards the overall success of the group.
- Excellent communication and strong business experience.

About Bristlecone
About
Similar jobs (10)
About Us:
CLOUDSUFI, a Google Cloud Premier Partner, is a global leading provider of data-driven digital transformation across cloud-based enterprises. With a global presence and focus on Software & Platforms, Life sciences and Healthcare, Retail, CPG, financial services and supply chain, CLOUDSUFI is positioned to meet customers where they are in their data monetization journey.
Our Values
We are a passionate and empathetic team that prioritizes human values. Our purpose is to elevate the quality of lives for our family, customers, partners and the community.
Equal Opportunity Statement
CLOUDSUFI is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. All qualified candidates receive consideration for employment without regard to race, colour, religion, gender, gender identity or expression, sexual orientation and national origin status. We provide equal opportunities in employment, advancement, and all other areas of our workplace. Please explore more at https://www.cloudsufi.com/
About the role
Summary We are seeking an experienced SAP Basis Consultant to manage, optimize, and secure our enterprise SAP landscape across hybrid environments. You will be responsible for administering SAP ECC 6.0 and S/4HANA systems hosted on Google Cloud Platform (GCP), ensuring high availability, performance, and seamless connectivity across modern cloud services.
Key Responsibilities
- System Administration & Maintenance: Lead core SAP Basis tasks including installation, upgrades, system copies, patch management (SPS/EHP), client copy operations, and kernel updates for SAP ECC and S/4HANA.
- Infrastructure & GCP Management: Operations, monitoring, and architecture maintenance of SAP workloads hosted on Google Cloud Platform (GCP), optimizing cloud resources and storage.
- Security & Authentication: Implement and maintain robust security protocols, user authorization profiles, and single sign-on (SSO) configurations utilizing OAuth 2.0 and SAML integrations.
- Integration & BTP Administration: Manage SAP Business Technology Platform (BTP) tenants, connectivity (SAP Cloud Connector), destinations, and cloud integration components.
- Disaster Recovery & Performance Tuning: Perform proactive system monitoring, performance tuning, database administration, and execute reliable backup, restore, and disaster recovery plans.
Qualifications & Experience
- Core Experience: 3+ years of hands-on experience as an SAP Basis Consultant managing both SAP ECC and S/4HANA environments.
- Cloud & Security: Proven expertise in GCP cloud architecture for SAP and advanced authentication mechanisms (OAuth, SSO, Identity Provisioning).
- SAP BTP: Hands-on experience with SAP BTP configuration and administration.
Preferred / Desirable Skills
- Experience administering SAP Data Services (BODS), SAP SLT for ETL pipelines.
- Familiarity with SAP Datasphere for unified data management.
- Technical setup and connectivity experience with SAP Analytics Cloud (SAC).
This role is focused on Cyber Security Risk, Governance, Risk & Compliance (GRC), IT Controls, and Security Audits, with strong emphasis on Backup, Disaster Recovery (DR), and Business Continuity (BCP).
Key responsibilities:
- Perform security control assessments against organizational policies, security standards, and regulatory requirements.
- Identify control gaps, risks, audit findings, and compliance issues, and monitor remediation until closure.
- Assess Backup, Disaster Recovery, and Business Continuity processes and controls.
- Validate backup availability, restoration/recovery procedures, DR readiness, and evidence of periodic DR/BCP testing.
- Conduct control testing and risk assessments and support internal/external security audits.
- Review security policies, procedures, standards, and governance frameworks for compliance.
- Maintain audit evidence, track findings, and coordinate with stakeholders for remediation.
- Support overall security governance, regulatory compliance, and IT risk management activities.
Required Skills
- Cyber Security Risk & Compliance / GRC
- IT Risk & Controls
- Security Control Assessment & Testing
- Security Audits
- Backup & Disaster Recovery
- BCP / DR
- Risk Assessment
- Compliance & Governance
- Security Policies & Standards
- Audit Finding & Remediation Management

We are seeking an experienced Governance, Risk & Compliance (GRC) Lead to spearhead the
design, implementation, and maintenance of our ISO 27001 Information Security Management
System (ISMS). This is a hands-on leadership role responsible for establishing a robust security
governance framework, achieving ISO 27001 certification, and embedding a culture of
continuous security improvement across the organization.
Key Responsibilities
● ISMS Implementation & Certification: Lead end-to-end ISO 27001 implementation
from gap analysis through to successful Stage 1 and Stage 2 certification audits;
manage external auditor relationships
● Risk Management: Develop and operationalize the information security risk
management framework; conduct risk assessments, treatment planning, and risk
acceptance processes.
● Policy & Governance : Author, approve, and maintain the Statement of Applicability
(SoA), information security policies, standards, and procedures aligned with ISO 27001
Annex A controls.
● Control Implementation: Translate ISO 27001 Annex A controls into operational
security measures; coordinate with IT, Accounts, HR, Backoffice, and business units to
implement and validate controls.
● Compliance Monitoring: Establish continuous monitoring, internal audit programs, and
KPIs/KRIs to measure ISMS effectiveness; manage non-conformities and corrective
actions.
● Third-Party Risk: Oversee vendor security assessments and ensure supply chain
security controls meet organizational and ISO 27001 standards.
● Stakeholder Management: Report ISMS performance, risks, and compliance status to
senior leadership and the board; act as primary liaison for external auditors and
regulators.
Required Qualifications
● 5+ years of experience in information security governance, risk, and compliance
● Proven track record of leading at least one full ISO 27001:2022 certification cycle (gap
analysis → certification)
● Deep expertise in ISO 27001:2022 standard, Annex A controls, and ISMS
documentation requirements
● Strong understanding of risk assessment methodologies (e.g., ISO 27005, NIST RMF,
OCTAVE, FAIR)
● Familiarity with internal audit practices and managing external certification bodies
● Excellent stakeholder management and ability to influence across technical and non-
technical teams
● Strong documentation and communication skills — able to translate complex standards
into actionable guidance
Preferred Qualifications
● Experience implementing ISMS in fintech, healthcare, or regulated industries
● Experience with SOC 2, GDPR, NIST CSF, PCI-DSS, or other compliance frameworks
● Background in cloud security (AWS, Azure, GCP) and DevSecOps environments
● Knowledge of automation for compliance evidence collection and control testing
● Certifications: CISM, CRISC, CISA, ISO 27001 Lead Auditor, or ISO 27001 Lead
Implementer
Why Join Us
● Opportunity to build the security governance function from the ground up
● High-visibility role with direct impact on customer trust and market differentiation
● Collaborative environment that values security as a business enabler, not a blocker
Company Profile:
We are a one-stop financial services shop, widely known for quality of its advice, personalized
service and cutting-edge technology. We started our journey in 2008. Currently we are serving
more than 50,000 investors with a team of 100 members. Our core product offering is mutual
fund, FD, Govt. Bonds, Debenture, etc.
Job Summary
We are looking for an experienced GRC Technology & Transformation Lead to drive the delivery, implementation, and transformation of enterprise Governance, Risk, and Compliance (GRC) technology solutions. The role will partner with Risk, Compliance, Audit, and Technology stakeholders to modernize risk management processes through platform implementations, workflow automation, analytics, and AI-enabled solutions.
The ideal candidate will have a strong understanding of enterprise GRC frameworks, operational risk processes, and risk technology platforms, along with proven experience in technology delivery, stakeholder management, and large-scale transformation programmes.
Key Responsibilities
- Lead end-to-end delivery and transformation of enterprise GRC technology solutions supporting RCSA, Third-Party Risk Management (TPRM), Operational Risk, Controls, Compliance, and Corporate Risk functions.
- Drive implementation, configuration, enhancement, and optimization of enterprise risk technology platforms such as RSA Archer, ServiceNow GRC/IRM/TPRM, or equivalent platforms.
- Collaborate with Risk, Compliance, Internal Audit, and business stakeholders to understand requirements and translate them into scalable technology solutions.
- Define and execute technology roadmaps, platform strategies, and transformation initiatives aligned with enterprise risk and governance objectives.
- Lead workflow automation and process digitization initiatives to improve risk assessments, control monitoring, issue management, compliance tracking, and reporting.
- Identify opportunities to leverage AI/GenAI, analytics, and data-driven solutions to enhance risk management processes and operational efficiency.
- Oversee programme planning, delivery governance, resource management, risk mitigation, and continuous platform improvement.
- Manage global delivery teams and coordinate with business stakeholders, technology teams, system integrators, and external vendors.
- Establish delivery standards, performance metrics, governance mechanisms, and reporting frameworks to track programme outcomes.
- Ensure solutions align with enterprise architecture, information security, regulatory requirements, and internal governance standards.
Required Skills & Experience
- 12+ years of experience in technology delivery, enterprise GRC solutions, risk technology, or large-scale technology transformation.
- Strong understanding of Enterprise GRC, Operational Risk, RCSA, TPRM, controls management, compliance, and corporate risk processes.
- Experience with one or more enterprise risk technology platforms, such as:
- RSA Archer
- ServiceNow GRC / Integrated Risk Management (IRM) / TPRM
- Other enterprise GRC and risk management platforms
- Proven experience leading end-to-end technology implementations, platform enhancements, and transformation programmes.
- Strong understanding of workflow automation, process optimization, data management, analytics, and management reporting.
- Exposure to AI/GenAI-enabled solutions and automation initiatives is desirable.
- Excellent stakeholder management skills, with the ability to engage senior leaders across Risk, Compliance, Audit, and Technology.
- Experience managing cross-functional and global delivery teams, programme governance, and vendor relationships.
- Strong communication, problem-solving, strategic planning, and decision-making skills.
Preferred Qualifications
- Experience in banking, financial services, insurance, or other regulated industries.
- Exposure to regulatory risk management, audit management, controls testing, issue management, and enterprise risk reporting.
- Experience in GRC platform integration, data migration, reporting, and enterprise application modernization.
- Relevant certifications in RSA Archer, ServiceNow IRM/GRC, project/programme management, or risk management are an advantage.
Key Competencies
- Enterprise GRC Technology Strategy
- Technology Delivery & Programme Leadership
- Risk Platform Implementation and Optimization
- Stakeholder & Vendor Management
- Process Automation and Digital Transformation
- AI/GenAI and Analytics Enablement
- Global Team Leadership
- Governance, Controls and Continuous Improvement
We are looking for a Senior SAP Consultant with a strong SAP FICO background and proven experience in end-to-end SAP implementations, migrations & transformation projects.
🔑 Key Skills:
✅ SAP FI/CO – GL, AP, AR, AA, CO-CCA, PCA, COPA, Product Costing
✅ S/4HANA Implementation / Migration
✅ Cross-module integration with MM, SD, PP
✅ End-to-end SAP Implementation experience
✅ Solution Design & Client Handling
✅ Pre-sales, Requirement Gathering & Solutioning
✅ Team Leadership & Mentoring
✅ Exposure to SAP Cloud / S/4HANA Cloud preferred
🎯 Ideal candidate: Someone who can go beyond FICO and take ownership of core SAP delivery, implementation leadership, and solutioning.
About Searce
Searce is a global, AI-native, engineering-led technology consultancy and a Premier Google
Cloud Partner — recognized as the Google Cloud Workplace AI Transformation Partner of the
Year, APAC (2026). With 20+ years of experience and 3,000+ clients across 10+ countries, we
help businesses stay ahead of the cloud curve.
The Role
We're looking for a Lead Cloud Security & Reliability Engineer with deep GCP expertise to own
end-to-end cloud reliability and security forAPAC enterprise clients. As Lead, you'll set the architectural direction, mentor your squad, and drive measurable client outcomes across multi-
cloud environments.
What You'll Do
Own Client Delivery — Lead 24x7 GCP cloud operations forAPAC clients. Define SLO frameworks and ensure adherence.
Architect Solutions — Design scalable, secure GCP-primary architectures with multi-cloud awareness.
Drive Reliability — Lead incident response, RCA, and long-term remediation across production systems.
Mentor & Elevate — Coach and grow a squad of Senior CSREs.
Drive FinOps — Own cloud cost governance and optimization with quantified impact.
Be the Expert — Represent Searce's technical depth in global client conversations.
What We're Looking For
Experience
7–12 years total with 5+ years on GCP cloud infrastructure
Strong background in Cloud Managed Services / MSP environments
Proven experience leading a team in client-facing delivery
Multi-cloud exposure (AWS/Azure secondary) preferred
Technical Skills (Must-Have)
- GCP: GKE, IAM, VPC, Cloud Monitoring, Stackdriver, KMS — demonstrated in work
- experience
- Kubernetes: GKE — production cluster management, Helm
- IaC: Terraform — module-level, reusable frameworks
- Observability: Prometheus, Grafana, Thanos or equivalent
- Security: IAM, Zero-trust, DevSecOps, CSPM tools
- Scripting: Python or Go
- FinOps: GCP cost governance demonstrated
Nice to Have
- GCP Professional Cloud Architect / Pro DevOps Engineer certification
- AWS / Azure secondary experience
- CKA (Certified Kubernetes Administrator)
- ITIL / change management awareness
- APAC client delivery experience
Why Searce?
🏆 Google Cloud Partner of the Year — APAC 2026
🌍 Work with APAC enterprise clients across multiple industries
🤖 AI-first, engineering-led culture
📈 Lead-level ownership with real career growth
🤝 HAPPIER values — Humble, Adaptable, Positive, Passionate, Innovative, Excellence,
Responsible
ServiceNow USEM Technical Consultant -(Offshore) Contract Role
· Location- Remote
· Contract- 6 months
Job Description
Position Description:
The ServiceNow USEM (SecOps) Technical Consultant (Security Operations) is responsible to lead the design, development, and implementation of security operations (SecOps) solutions on the ServiceNow platform. This role is responsible for integrating security workflows, enhancing automation, and optimizing security response processes to ensure robust cybersecurity operations.
Primary Responsibilities:
Design, configure, and implement ServiceNow GRC/IRM modules, focusing on Policy, Compliance, and Risk Management frameworks. Develop custom solutions utilizing Flow Designer, Business Rules, Client Scripts, UI Actions, UI Policies, and Script Includes.
Configure Service Portal/Employee Center components, Service Catalog record producers, notifications, inbound email actions, and email-actionable approvals.
Manage Access Control Lists (ACLs) and role-based access designs alongside SLA definitions and task-based SLA behaviors.
Handle update set management and oversee code promotion across development, test, and production instances.
Requirements
Qualifications:
· 5+ years hands-on ServiceNow development experience, with demonstrable delivery on client-facing implementation projects
· 2+ years working directly in ServiceNow GRC/IRM, specifically Policy and Compliance Management and/or Risk Management. Candidates whose GRC exposure is limited to a single mod
· Demonstrated experience with Flow Designer, business rules, client scripts, UI Actions, UI Policies, and script includes
· Experience configuring notifications and inbound email actions, including email-actionable approvals
· Experience with ACL configuration and understanding of role-based access design
· Experience with SLA definitions and task-based SLA behavior
· Experience with Service Catalog record producers and Employee Center / Service Portal configuration
· Proficiency with update set management and promotion across development, test, and production instances
· ServiceNow Certified System Administrator (CSA) required CIS Advanced Risk preferred
· Work Experience: 5+ years
· Industry: Technology
Key Responsibilities
- Implement, configure, and support SAP Master Data Governance (MDG).
- Work on master data domains such as Business Partner, Customer, Supplier/Vendor, Material, and Finance.
- Configure change request types, workflows, validations, derivations, and business rules.
- Work with BRFplus, Floorplan Manager (FPM), and SAP MDG data models.
- Integrate SAP MDG with SAP S/4HANA and SAP ECC systems.
- Perform data replication using SAP DRF (Data Replication Framework).
- Troubleshoot data governance and replication issues.
- Prepare functional specifications and coordinate with ABAP developers.
- Support testing, data migration, deployment, and production incidents.
Required Technical Skills
- SAP MDG configuration and implementation.
- SAP MDG data models and change request management.
- Workflow configuration and approval processes.
- BRFplus, DRF, and SOA/ALE integration concepts.
- Knowledge of SAP S/4HANA and SAP Fiori.
- Understanding of master data quality, governance, and data migration.
We are looking for an experienced SAP Ariba Consultant with strong hands-on experience in Ariba implementation and Indirect Procurement.
Key Responsibilities
- Handle end-to-end SAP Ariba implementation and configuration.
- Work on Ariba Sourcing, Contracts, Buying, and Invoicing.
- Configure workflows, forms, templates, approval rules, and catalogs.
- Manage RFI, RFP, RFQ, and Auction processes.
- Configure requisition, PO, GR, and invoice processes.
- Handle SAP Ariba CIG integration with SAP S/4HANA.
- Support master data and transactional data integration.
- Work on external requisition imports and data mapping.
- Support testing, UAT, cutover, and hypercare.
- Troubleshoot configuration and integration issues.
- Coordinate with business users, IT teams, and vendors.
Required Skills
- 8+ years of SAP Ariba experience.
- Strong experience in Ariba Sourcing, Contracts, Buying, and Invoicing.
- Hands-on Ariba configuration and customization.
- Strong knowledge of SAP Ariba CIG.
- Experience with SAP S/4HANA integration.
- Knowledge of P2P processes.
- Experience with CXML, APIs, and data imports.
- Good communication and stakeholder management skills.
Good to Have
- Groovy scripting
- SAP P2P
- Tosca/testing tools
- Third-party integrations
- SAP S/4HANA Procurement
Job Title: Technical Consultant – Netskope & SSE (L3 Engineer)
Company: Inflow Technologies
Location: Bangalore (Work From Office, 5 days/week)
About Inflow Technologies:
Inflow Technologies, founded in 2005 and headquartered in Bangalore, is a leading value-added IT infrastructure distributor across Networking, Cybersecurity, Unified Communications, AIDC, Surveillance, Server, Storage, and Software. With 20+ locations across India/South Asia and a 120+ member certified technical team, Inflow supports channel partners through the full solution sales cycle. Annual run-rate revenue: USD 700+ Million.
Position Overview:
We're looking for an experienced Technical Consultant (L3 Engineer) specializing in Netskope and Security Service Edge (SSE) technologies. You'll own end-to-end architecture, design, deployment, and optimization of cloud security solutions — acting as a trusted advisor who translates business requirements into secure, scalable technical architectures, and resolves advanced issues through root cause analysis.
Key Responsibilities:
Implementation & Deployment
- Deploy Netskope CASB (API + Proxy), SWG, DLP (Email/Web/Network), ZTNA (Private Access), NPA, and Prime Advantage package
- Configure traffic steering (Client, GRE, IPsec), policy rules (DLP, URL filtering, access control), and dashboard fine-tuning
- Perform agent rollout across Windows, Mac, and Mobile
Architecture & Design
- Design a secure access architecture for remote users, branch offices, and cloud workloads
- Integrate with identity providers (Azure AD, Okta) and existing security stack (Firewall, Proxy, SIEM)
- Integrate Netskope with SIEM (Splunk, QRadar), EDR tools, and email security
- Configure SSO/SAML authentication
Required Qualifications:
- Bachelor's degree in IT/CS or related field
- 6–8 years of experience (L3 level)
- Preferred certifications: Netskope Certified Cloud Security Architect (NCSA), NSK 100/200/300, CCNA/Security+ (good to have)
Interview Process: 2 rounds (Virtual) + Final round (Face-to-Face)












