SAP GRC Consultant

Brief Job Description :

• Candidate should have the SAP GRC AC implementation experience and minimum two GRC AC Implementation experiences.
• Candidate should have the experience in embedded GRC AC implementation.
• Candidate should have the experience in all Access Control (AC) modules i.e. ARA, EMA, ARM and BRM.
• Candidate should have the experience in password reset functionality using GRC module.
• Candidate should have the experience in satellite system configuration in GRC AC.
• Candidate should have the relevant 7 years of experience in SAP GRC AC.

The SAP GRC Consultant is responsible for implementing, configuring, and supporting SAP GRC solutions to ensure compliance, manage risks, and enforce segregation of duties (SoD) across SAP systems. The role works closely with business, audit, and IT teams to ensure governance and regulatory requirements are met.

Key Responsibilities

SAP GRC Access Control (AC)

• Configure and maintain SAP GRC AC modules:
• Access Risk Analysis (ARA)
• Access Request Management (ARM)
• Emergency Access Management (EAM / Firefighter)
• Business Role Management (BRM)
• Perform SoD analysis, role risk analysis, user risk analysis
• Design and manage role-based access models
• Support user provisioning & de-provisioning
• Manage firefighter IDs, logs, and reviews
• Configure MSMP workflows

SAP GRC Process Control (PC)

• Support internal controls documentation and automation
• Configure controls, organizations, subprocesses, and assessments
• Coordinate with internal/external auditors
• Support compliance testing and remediation activities

SAP GRC Risk Management (RM) (if applicable)

• Identify, assess, and mitigate enterprise risks
• Maintain risk registers and impact assessments
• Support risk reporting and dashboards

Compliance & Audit Support

• Support SOX, GDPR, ISO, and internal audit requirements
• Provide audit reports and remediation tracking
• Coordinate UAT and production deployments

Support & Maintenance

• Handle incidents, service requests, and enhancements
• Perform system upgrades, patches, and integrations
• Work with BASIS, Security, and Functional teams

Technical Skills

• SAP GRC 10.x / 12.x
• SAP Security (User Admin, Roles, Authorization Concepts)
• MSMP workflow configuration
• Firefighter (EAM) configuration
• Integration with SAP ECC / S/4HANA / BW / SuccessFactors / Ariba
• Risk ruleset maintenance
• Understanding of SAP tables related to GRC & Security

Functional Knowledge

• Governance, Risk, and Compliance processes
• Segregation of Duties (SoD)
• Internal controls & audit principles
• ITGC & SOX compliance