Job Description

Location: Penang/ Kuala Lumpur (we are hiring for both location)

We are seeking an experienced SAP Governance, Risk and Compliance (GRC) Consultant to join our SAP practice. The successful candidate will play a key role in delivering SAP GRC solutions, with a primary focus on SAP Access Control. Experience in SAP Process Control and broader SAP security and compliance frameworks will be an added advantage.

Key Responsibilities

Lead and deliver SAP GRC Access Control implementation, enhancement, and support projects.
Design, configure, and maintain SAP GRC Access Control modules, including:
Access Risk Analysis (ARA)
Access Request Management (ARM)
Emergency Access Management (EAM)
Business Role Management (BRM)
Collaborate with business and IT stakeholders to define segregation of duties (SoD) rules and compliance requirements.
Conduct user access reviews, risk assessments, and compliance audits.
Support SAP S/4HANA transformation projects by integrating GRC controls and governance processes.
Analyze and resolve security and authorization issues across SAP landscapes.
Provide recommendations on governance, risk, and compliance best practices.
Prepare functional specifications, design documents, test scripts, and training materials.
Mentor junior consultants and support project planning and stakeholder management activities.
For Manager-level candidates, lead project teams, manage client relationships, and drive business development activities.

Key Requirements

Bachelor's degree in Information Technology, Computer Science, Accounting, Business Information Systems, or a related field.
Senior Associate: 3-6 years of relevant SAP GRC experience.
Manager: 7+ years of relevant SAP GRC experience with project leadership responsibilities.
Strong hands-on experience in SAP GRC Access Control implementations and support.
Experience in SAP S/4HANA environments and SAP security concepts.
Good understanding of Segregation of Duties (SoD), compliance, and audit requirements.
Experience working with SAP ECC and/or SAP S/4HANA environments.
Strong stakeholder management and communication skills.
Ability to work independently and in a team-oriented consulting environment.

Preferred Qualifications

Experience with SAP GRC Process Control.
Exposure to SAP Security and Authorization concepts.
Experience in regulated industries such as Banking, Financial Services, Insurance, or Public Sector.
SAP GRC and/or SAP Security certifications.
Experience in end-to-end SAP implementation or transformation projects.

What We're Looking For