Job Description: This role is for an SAP GRC Engineer / Admin
The following details required and desired skills for this position:
SAP GRC Suite Expertise
" Business Process, Risk/Ruleset management, and Process Controls Development and Management
" Hands-on experience of leading the business through risk analysis and remediation
" Deep knowledge of SAP GRC components: Access Control (AC), Process Control (PC), Risk Management (RM), and Audit Management (AM)
" Experience configuring and maintaining GRC solutions (role design, SoD rules, workflow setup, remediation)
Access Control (AC)
" Designing, testing, and maintaining composite and single roles
" Managing SoD matrices, risk analysis, and remediation projects
" Using tools such as Access Risk Analyzer (ARA), Role Manager, and Business Role Builder
Engineering Methodology
" Experience with standard engineering process
" Background in doing requirements discovery and translation from business requirements to technical requirements / deliverable
" Experience with software systems design
Process Control & Risk Management
" Building internal controls, monitoring plans, and audit workpapers
" Configuring continuous control monitoring (CCM) and KPI dashboards
" Conducting risk assessments and documenting control effectiveness
Compliance & Audit
" Understanding of regulatory frameworks (SOX, GDPR, ISO 27001, FISMA, etc.)
" Ability to generate auditready reports and evidence
" Coordination with internal and external auditors
SAP Basis & Integration
" Fundamentals of SAP NetWeaver, S/4HANA, and system landscape management
" Transport management (CTS) for GRC objects
" Integration with SAP Identity Management (IdM) and thirdparty IAM solutions
Technical Tools & Scripting
" Proficiency with GRC configuration tools (PFCG, GRAC, GRPC, GRRM)
" Basic ABAP debugging for securityrelated enhancements
" Automation scripts (PowerShell, Python, Bash) for user provisioning and report generation
Security Incident Management
" Monitoring GRC alerts, handling violations, and executing remediation steps
" Collaboration with SAP Basis and IT security teams for patches and hardening
Project & Change Management
" Experience leading GRC implementation or upgrade projects (Agile or Waterfall)
" Managing change requests, documentation, and stakeholder communication
Data Analysis & Reporting
" Building regular SoD, risk, and compliance reports (using SAP GRC reporting, Excel, Power BI)
" Analyzing large userrole datasets to identify anomalies
Communication & Training
" Clear documentation of GRC policies, procedures, and role designs
" Conducting training sessions for functional users and auditors
" Liaising with business owners, security teams, and IT partners
Soft Skills
" Strong analytical and problemsolving abilities
" High attention to detail and accuracy
" Proactive attitude and willingness to stay current with GRC best practices and regulatory changes