SAP GRC Consultant

Job Description:

• Administer and maintain SAP GRC systems, including Access Control (ARA, ARM, EAM, BRM, UAR), Process Control (PC), and Fraud Management (FM).
• Manage system performance, troubleshoot issues, and ensure smooth day-to-day operations.
• Design, configure, and implement SAP GRC solutions with integration to SAP HR, SAP BO, Fiori, and non-SAP systems over public-facing networks.
• Configure and maintain BRF+ workflows and MSMP for request approvals and access workflows.
• Enhance GRC AC, PC, and FM modules based on business requirements through change requests.
• Coordinate with functional consultants and ABAP development teams for design, development, and issue resolution.
• Support User Acceptance Testing (UAT) and Integration Testing for GRC changes.
• Ensure consistency of security settings, role design, and change management across SAP landscapes.
• Apply deep understanding of SAP HR authorization concepts and overall SAP security.
• Assess Segregation of Duties (SoD) conflicts and design appropriate mitigating controls.
• Support periodic security reviews, audits, and compliance assessments (e.g., SOX).
• Contribute to information security baselining and alignment with risk frameworks and standards.
• Provide expert advice on IT controls and business processes within a manufacturing environment.

Requirements:

• Degree in Computer Science or related disciplines.
• Preferably at least 1 year of experience with implementation / maintenance, consulting, pre-sales or as end-user using the above product.
• Preferably hands-on experience with configuring ARA, ARM, EAM, BRM, UAR, Process Control, and Fraud Management.
• Understanding of SAP HR authorization concepts and integration scenarios.
• Knowledge in SoD, access risk analysis, compliance frameworks, and mitigation strategies.
• Excellent communication, stakeholder management, and documentation skills.
• Good knowledge with hands-on experience in managing IT incidents and problems.
• Good analytical skills with ability to quickly establish cause of system issues reported.
• Able to work independently as well as an excellent team player
• Critical thinking and problem-solving skills.