SAP GRC Consultant

We are seeking a highly experienced SAP GRC Consultant to lead and manage the end-to-end implementation and support of SAP GRC modules. You will be responsible for designing and implementing workflows, performing risk analysis, and integrating SAP GRC with various systems. This role requires deep expertise in SAP GRC Access Control, Process Control, and Risk Management, along with a strong understanding of security concepts and regulatory compliance.

Roles & Responsibilities:

• Lead and manage end-to-end implementation and support of SAP GRC Access Control (ARM, ARA, EAM, BRM), Process Control, and Risk Management modules.
• Design and implement workflows, rule sets, and mitigation controls.
• Perform risk analysis, access request configuration, and emergency access management.
• Integrate SAP GRC with ECC, S/4HANA, and non-SAP systems.
• Work with business stakeholders to gather requirements and translate them into technical solutions.
• Perform GRC upgrades, patches, and performance tuning.
• Conduct training and knowledge transfer sessions for end-users and administrators.
• Ensure alignment with SOX, GDPR, and other compliance frameworks.
• Work collaboratively with SAP Security, Audit, and Functional teams.
• Create detailed technical documentation and functional specifications.

Skills Required:

• Strong expertise in GRC 12.0/10.x modules (Access Control, Risk Management, Process Control).
• In-depth understanding of SAP security concepts and role design.
• Hands-on experience with S/4HANA and Fiori authorization is a plus.
• Familiarity with compliance standards: SOX, GDPR, ISO 27001, etc.
• Good analytical, communication, and documentation skills.
• Ability to work independently in a remote setup and manage client communication effectively.
• SAP Security certification or SAP GRC certification is a plus.
• Experience with SAP IDM, SAP BTP Security, or SAP Cloud Security is a plus.
• Exposure to automation or scripting in GRC processes is a plus.

QUALIFICATION:

• Bachelor's degree in IT, Computer Science, or a related field.