SAP GRC Consultant - E2E Implementation

Description :

- Perform SoD (Segregation of Duties) analysis and remediation.

- Manage user access provisioning and emergency access management.

- Configure and maintain Firefighter IDs, owners, controllers, and logs.

- Conduct regular risk assessments and audits.

Role & Authorization Management :

- Design and maintain SAP roles, profiles, and authorizations.

- Perform role redesign, role cleanup, and optimization.

- Support user provisioning, de-provisioning, and periodic user reviews.

- Integrate GRC with ECC, S/4HANA, Fiori, BW, CRM, and other SAP systems.

Compliance & Controls :

- Design and implement -mitigation controls.

- Monitor compliance violations and create remediation plans.

- Ensure compliance with company and regulatory security standards.

Implementation & Support :

- Lead GRC implementation and upgrade projects.

- Configure risk ruleset, workflows, connectors, and BRF+.

- Provide L2/L3 production support.

- Work closely with audit, compliance, and IT security teams.

Documentation & Training :

- Create and maintain process documentation, SOPs, and control matrices.

- Train business users and security teams on GRC processes.

Required Skills :

Strong knowledge of :

- SAP GRC Access Control (AC)

- SoD, Risk Analysis, and Compliance

- SAP Authorizations (ECC & S/4HANA)

- Firefighter, EAM, BRM, ARM

- Experience in SAP Fiori security and S/4HANA roles.

- Understanding of SOX, audit, and compliance frameworks.

- Experience with SAP GRC 10.x / 12.x.

- Strong communication and stakeholder management skills.

Good to Have :

- SAP GRC Certification

- Experience in global rollout or transformation projects

- Knowledge of SAP Identity Management (IDM) or IAG