Deputy Manager

Role Title:

Purpose of the Role

GRC Access Controls (AC)

Reporting Structure

• Functional Reporting:

  Senior Team Member – GRC

• Administrative Reporting:

  Senior Team Member – GRC

• Direct Reports:

  None

• Indirect Reports:

  None

• Contractual Employees:

  None

Key Responsibilities

• Design, maintain, and update SAP roles in accordance with GRC Access Controls guidelines.
• Execute day-to-day tasks related to the SAP GRC Access Controls module.
• Coordinate with third-party vendors or managed service partners to resolve access-related issues.
• Support internal and external audits by providing necessary access control documentation and evidence.
• Prepare Segregation of Duties (SoD) risk remediation plans.
• Extract and prepare data for ITGC (IT General Controls) compliance.
• Develop and support RPA (Robotic Process Automation) and dashboard use cases.
• Manage SAP GRC Access Request Management processes.
• Deliver training and workshops on GRC-related topics when required.

Challenges

• Collaborating with multiple internal and external stakeholders.
• Adapting to frequent and unpredictable changes.

Key Dimensions

• Preparation of SoD risk remediation plans.
• Extraction and preparation of ITGC controls data.
• Development of RPA and dashboard use cases.
• Management of SAP GRC Access Request workflows.

Qualifications & Experience

Education:

• Graduate in B.Tech / B.E / BCA / MCA
• Certification in GRC Security (preferred but not mandatory)

Experience:

• Minimum 5 years in SAP GRC Access Control 12.0, SAP Security, and ITGC compliance.
• Mandatory experience in SAP GRC implementation.
• Consulting experience preferred.

Technical Competencies

• Operational knowledge of SAP Security.
• User ID and role maintenance support.
• Hands-on experience with SAP GRC Access Controls v12 modules:
• Access Request Management
• Access Risk Management
• User Access Review
• Emergency Access Management
• Experience in managing ITGC audits.
• Ability to deliver training and workshops on GRC topics.