SAP GRC (NCS/Job/ 4031)

• Lead L2/L3 support for SAP GRC (AC/PC/RM and related components) incidents, problems and service requests, ensuring SLA and quality adherence.
• Own resolution of complex authorization, SOD, workflow and control issues across SAP landscapes (ECC, S/4HANA and other connected systems).
• Monitor GRC jobs, workflows, connectors, data synchronizations and ruleset updates, working closely with Basis/security and application teams.
• Perform root cause analysis for recurring or high‑impact issues and implement structural fixes and preventive controls.

Configuration, Change Delivery & Integration

• Configure and maintain SAP GRC Access Control (ARA, ARM, BRM, EAM) including rulesets, SOD functions/risks, workflows, mitigating controls and firefighter design.
• Contribute to or lead configuration of Process Control / Risk Management frameworks (controls library, assessments, monitoring, issues and remediation) where in scope.
• Deliver small to medium enhancements and projects (e.g., ruleset updates, new connectors, new company codes/countries, integration with S/4HANA or cloud apps).
• Ensure robust integration of GRC with SAP systems, IDM/IAM tools, ticketing and monitoring platforms following agreed standards and patterns.

Compliance, Risk & Audit Governance

• Align GRC configurations and processes with corporate and regulatory frameworks (e.g., SOX, GDPR, ISO standards, internal policies).
• Maintain and refine SOD rulesets, mitigating controls and review cycles across relevant applications.
• Support internal and external audits for access, SOD and controls, including evidence gathering and remediation follow‑up.
• Help define KPIs and dashboards in GRC to monitor control effectiveness and risk posture.

Stakeholder Management & Collaboration

• Work with risk, internal audit, compliance, finance and IT stakeholders to understand requirements and shape GRC improvements.
• Communicate clearly on issue status, change impacts, risks and mitigation plans to business and IT stakeholders.
• Collaborate with project/transformation teams to transition new GRC capabilities into steady‑state managed services.

Leadership & Team Enablement

• Provide technical and functional guidance, coaching and mentoring to SAP GRC and security consultants.
• Lead or participate in design reviews, solution walkthroughs and standards enforcement, ensuring high‑quality and compliant solutions.
• Promote knowledge sharing, automation and continuous improvement within the GRC and security practice.
• Support a culture of ownership, ethics, compliance and strong customer focus.

Required Skills & Competencies

Technical & Functional

• Solid hands‑on experience with SAP GRC Access Control (ARA, ARM, BRM, EAM):
  • SOD ruleset design and maintenance, risk analysis and remediation
  • Access Request Management workflows and provisioning
  • Business Role Management design and lifecycle
  • Emergency Access Management (firefighter) setup, usage and governance
• Good experience with SAP GRC Process Control and/or Risk Management (controls, assessments, CCM, issues, remediation) is highly desirable.
• Strong understanding of SAP authorization concepts (roles, profiles, auth objects, structural authorizations, analysis authorizations) in ECC/S/4HANA and related systems.
• Experience integrating GRC with multiple SAP and non‑SAP systems, IAM/IDM solutions and ticketing tools.
• Good understanding of financial and operational processes (order‑to‑cash, procure‑to‑pay, record‑to‑report, HR, supply chain) and their risks/controls.

Service Management & Operations

• Proven experience in AMS / managed services for SAP GRC / Security in multi‑system environments.
• Familiarity with ITIL processes (incident, problem, change, release) and enterprise ticketing/monitoring tools.
• Experience working across DEV/QA/PROD and handling transport, release and change management for GRC and security objects.