Responsibilities
- Manage SAP GRC workflows and master data, ensuring compliance with internal controls and governance requirements.
- Provide technical guidance and governance support to IT teams, control stakeholders, and key business users.
- Facilitate and execute GRC workflow and master data changes; assist functional and technical teams with process adoption.
- Define and maintain configuration standards for SAP GRC.
- Monitor workflow and master data designs to support SOX compliance, including Segregation of Duties (SoD) and sensitive transaction handling.
- Work with SAP Security and Governance teams to define appropriate GRC solutions and role-building strategies aligned with system capabilities.
- Recommend improvements to streamline and simplify existing control processes.
- Ensure SOX control compliance through execution of SAP security sector procedures.
- Review OSS Notes and SAP security patches, implement and test changes as needed.
- Manage the SAP GRC reporting approach, including adoption of risk assessments, continuous monitoring, training, and reporting.
- Participate in workshops and discussions between SAP Security and GRC teams to ensure alignment and solution accuracy.
- Integrate SAP security governance within the broader control environment and maintain sustainability across impacted stakeholders.
- Collaborate with audit, risk, and compliance teams to assess and validate GRC process design and effectiveness.
- Coordinate and communicate key SOX control activities, including quarterly IT application control reporting.
- Reinforce SAP GRC best practices with internal teams and third-party vendors.
- Participate in periodic security reviews and assessments.
- Manage internal and external audit relationships to maintain transparency and highlight progress in SAP GRC initiatives.
- Collaborate with Controls Governance and IT teams to holistically address and remediate audit findings.
Skills Required
Sap Grc, Sap Security, Brf+, Sox Compliance