Under limited supervision serve as technical and functional bridge between IT and business partners. Perform security and compliance assessments as well as evolving SAP GRC (Governance Risk Compliance) environment. Ensure that GRC rulesets accurately reflect business processes and that risks are mitigated with the appropriate controls.
WHAT YOU'LL BE DOING:
-
Ruleset Governance & Optimization: Support the GRC Manager on projects related to ruleset architecture, Segregation of Duties (SoD) conflicts, and SAP GRC reporting.
-
Lead the review and modification of the GRC ruleset to ensure alignment with evolving business processes.
-
Enhance ruleset permissions at the object and field level to reduce false positives and capture missing risks.
-
Access Control & Risk Mitigation: Review and adjudicate access requests to determine if requested roles are appropriate while adhering to the principle of least privilege.
-
Perform deep-dive reviews of mitigating controls to ensure they are properly designed and effectively mitigate the specific risks they are assigned to cover.
-
Identify and assess potential risks within IT projects and system enhancements, ensuring appropriate controls are built in.
-
Audit & Reporting: Gather and report data to support internal/external auditors and compliance partners.
WHAT WE ARE LOOKING FOR:
-
Requires a Bachelor’s degree in Management Information Systems, Accounting/Finance, or a related technical field or an equivalent combination of education and experience.
-
Requires at least 5 years related experience. Requires at least 3 years of direct experience in SAP GRC and/or SAP Security.
-
Strong, hands-on experience with SAP GRC (Access Control).
-
A technical understanding of SAP authorization objects and T-codes related to the EWM, TML, FI, MM, GTS, and HR modules.
-
Ability to analyze complex business systems and identify risks and control weaknesses.
-
Strong interpersonal skills to explain to business owners why a specific access request may be inappropriate and how to remediate the issue.
-
Ability to mentor junior team members and build effective partnerships across IT and business teams.
-
Experience with procurement systems (Ariba) is a plus.
