SAP GRC & Security Consultant

Job Title : SAP GRC Consultant / Analyst

Job Summary :

We are seeking a highly skilled and motivated SAP GRC (Governance, Risk, and Compliance) Consultant to join our team. The ideal candidate will be responsible for implementing, configuring, and supporting SAP GRC modules to ensure effective risk management, regulatory compliance, and strong internal controls. This role involves working closely with business stakeholders, IT security teams, and auditors to design, optimize, and maintain GRC processes that align with industry standards and regulatory requirements.

Key Responsibilities :

• Design, implement, and maintain SAP GRC Access Control (AC), Process Control (PC), and Risk Management modules.
• Conduct GRC assessments to identify risks, control gaps, and areas for improvement in security and compliance frameworks.
• Configure and maintain GRC tools including Access Risk Analysis (ARA), Emergency Access Management (EAM), Business Role Management (BRM), and Access Request Management (ARM).
• Manage user access provisioning and de-provisioning processes using GRC Access Control workflows.
• Analyze and mitigate segregation of duties (SoD) conflicts and critical access risks.
• Develop and maintain security roles, authorization concepts, and compliance policies.
• Work with internal audit and compliance teams to ensure that regulatory and audit requirements are met.
• Provide support during audits, including evidence collection and remediation of findings.
• Monitor GRC system performance and provide troubleshooting and root cause analysis for system issues.
• Deliver end-user training and documentation for GRC-related processes.
• Collaborate with cross-functional teams to integrate GRC with other SAP modules (e.g., SAP ECC, S / 4HANA, SAP Fiori) and non-SAP systems.

Qualifications and Skills :

Preferred Attributes :

Work Environment :

This position offers a challenging yet rewarding opportunity to contribute to a secure and compliant SAP landscape while advancing your expertise in GRC technology and regulatory standards.

(ref : hirist.tech)