This role is for SAP GRC Analyst, the primary focus would be to support business and IT users who have SAP GRC related access or provisioning issues. This role will support the execution of day-to-day sustain and support activities for SAP GRC deliverables for the PGT Global and individual PGT projects(SSA). This role requires close collaboration with SAP Security project lead/teams and Global SAP GRC Manager to determine priorities of work intake around access provisioning, SOD issues, GRC master data updates, Access provisioning issues and access recertification, also ensure that requirements are reviewed, solutions developed and implemented according to the sustain/support SLA timelines. The role will also closely work with the PMO, SAP Security, myidM, portal, Global GRC, design authority, technical and control teams to design solutions coming in through work intake processes and provide periodic updates on activities.
The scope of the role include
- s
Being hands on in SAP GRC AC application to develop solutions, workflows and well versed with configuration and BR - F+-Ensure SAP GRC access control project work while in project phase are addressed in a timely manner; in sustain phase are addressed within S
- LA-Enabling/Training security and other value stream team about GRC and IAM proce
- ssSupport access provisioning and Firefighter access issues resolution within S
- LASupport SAP GRC access control master data updat
- esServes as the liaison between Application Support, Security and GRC teams in understanding the requirements and building a soluti
- on-Maintain SAP GRC systems to be in compliance with the Security standards and polici
- esExecute the Quarterly SOX reporti
- ng-Analysing SOD risks in partnership with the Control Organization Creative thinker with ability to apply analytical skills to different issu
- esShould be able to clearly communicate and articulate requirements with good presentations skil
- lsShould be able to work with a geographically spread te
amResponsabili
- tiesMaintenance and Management of SAP GRC workflows and master data in compliance with controls. Provide governance and technical assistance to IT teams, control teams and key business users. (Executing acti
- ons)Facilitate and execute GRC workflow and master data changes activities including providing assistance/ guidance to functional/ technical te
- ams.Define and maintain GRC configuration standards in accordance with defined proce
- ssesMonitor the GRC workflow and master data design to support SarbanesOxley Compliance (SOX), including Segregation of Duties (SoD) and business/ technical sensitive transact
- ionsWork with SAP Security and SAP Governance team to align on GRC solut
- ionsProvide recommendations on ways to simplify/ streamline existing processes and controls to gain producti
- vityEnsures SOX controls compliance by executing SAP security sector proced
- uresReviews OSS Notes, security patches; implements and tests those pat
- chesManages the execution of SAP GRC reporting approach and adoption, including risk assessment processes, continuous monitoring, training and reporting (Providing consultat
- ion)Train users in IT processes and procedures; help during external and internal au
- ditsParticipate and drive workshops and team discussions between SAP security and GRC t
- eamsIntegrate security governance within overall control environment and sustain activities with the impacted par
- tiesInteraction with audit, risk, and control personnel to explain and evaluate the structure and design of GRC proce
- ssesPlan, communicate and coordinate key control (e.g., SOX) activities such as the quarterly related IT application control repor
- tingReinforce correct SAP security and GRC procedures with project teams and third party provider t
- eamsParticipates in security rev
- iewsManage internal/ external audit relationships to maintain a positive outlook on the progression of SAP GRC processes (being infor
med)Qualifica
- tions
Bachelor’s/Masters Degree in Business, Information Systems, Computer Science (or equivalent) is re - quiredMinimum 7+ years of Total expe
- rienceMinimum 3+ years SAP security and 4+ years of SAP GRC AC 10.1/12.X expe
- rienceMinimum of 1 full life cycle implementations of SAP GRC AC10.
- 1/12.XMinimum of 2 project support experience of SAP GRC AC10.
- 1/12.XCompetent in SAP GRC AC configurations, Access Controls, BRF+ , Emergency Access Management, Converged solution for
- cloudEnd to end SAP GRC AC master data(Roles, Firefighter, Controls, ruleset etc.) update process and underst
- andingProficient in SAP risk analysis and remediation using SAP G
- RC AC.Knowledge of SAP security authorization concept, as well as design and implementation metho
- dologyDemonstrates ability with SAP security transactions and S
- AP GRCWorking experience with service now ticketing tool and Solman Charm p
- rocessTechnical proficiency/Support experience with security build and requirements analysis/definition across multiple SAP systems (e.g. S4HANA, BI/BW,CRM, Process Orchestration, Fiori, SAP HANA
- etc.)Multiple years of IT system support expe
- rienceUnderstanding of internal controls, segregation of duties (SoD), sensitive transactions analysis, basic SAP development
- (e.g.,ABAP integration points), SAP modules, SAP Transport Management System, SAP Web Application Server, NetWeaver,
- HANA)Analytical, motivated, and selfconfident with communication to business users, IT partners, and ma
- nagersEstablish project/sustain deliverables and priorities working closely with security POC and GRC m
- anagerEnsures team success through organizational, functional, and team alignment towards team mission and obje
- ctivesProficient knowledge in Microsoft office tools including MS
- AccessEnglish proficiency re
- quiredProduct certification(s) in SAP Security Administration and or S
- AP GRCExperience in an IT customer facing role; comfort and confidence interacting with various levels of users, including frontline mana
- gementAbility to communicate solutions and impacts to customers and stakeh
- oldersAbility to excel in an aggressive, change oriented envir
- onmentAbility to support weekend and offhours acti
- vitiesService oriented at
titude
