SAP GRC and Security Consultant

Job Description

Job Summary: We are seeking a skilled SAP Security & GRC Process Control (PC) Consultant to support our organization in managing governance, risk, and compliance processes within the SAP landscape. The ideal candidate will have deep expertise in SAP GRC Process Control, SAP Security, and SOX/internal control frameworks, enabling strong risk mitigation and policy enforcement across the enterprise systems. Key Responsibilities: Design, configure, and maintain SAP GRC Process Control (PC) solutions. Implement and manage automated and manual controls within GRC PC. Support periodic risk assessments, control testing, and remediation processes. Coordinate with business process owners and internal audit teams to ensure compliance with SOX and internal control requirements. Manage and maintain user access controls, roles, authorizations, and segregation of duties (SoD) in SAP systems. Perform regular security and control reviews to ensure alignment with corporate compliance policies. Integrate GRC PC with other GRC modules (Access Control, Risk Management) and SAP backend systems. Support audits and respond to security/compliance-related findings and queries. Monitor and tune system performance related to GRC and security functionalities. Required Skills and Qualifications: 5+ years of experience in SAP Security and GRC, with at least 2 years in GRC Process Control (PC). Strong understanding of internal controls, risk management, compliance, and audit principles. Hands-on experience with: Control design and assessment workflows. Automated control monitoring. Continuous Control Monitoring (CCM) configuration. Master data management in GRC PC. Proficient in SAP roles & authorizations concept (ECC, S/4HANA, Fiori, etc.). Knowledge of SOX, GDPR, and other regulatory frameworks. Strong analytical and problem-solving skills. Excellent communication and stakeholder management abilities.