The posting
SAP GRC with Risk Management
Position: SAP GRC Consultant – Risk Management
Experience : 8 - 10 Years.
Employment Type: Full-Time
Key Responsibilities
- Implement, configure, and support SAP GRC Access Control and Risk Management solutions.
- Configure Access Risk Analysis (ARA), Access Request Management (ARM), Business Role Management (BRM), and Emergency Access Management (EAM/Firefighter).
- Perform Segregation of Duties (SoD) and critical access risk analysis.
- Configure and maintain risk rules, functions, risks, mitigating controls, and business processes.
- Conduct periodic user and role access reviews and support remediation of access violations.
- Work with business and audit teams to identify, assess, and mitigate SAP access and compliance risks.
- Integrate SAP GRC with SAP ECC/S/4HANA and other connected systems.
- Troubleshoot GRC workflows, connectors, synchronization issues, and authorization problems.
- Support internal/external audits and provide evidence related to access controls and compliance.
- Prepare functional specifications, configuration documents, test scripts, and user documentation.
- Participate in GRC upgrades, enhancements, testing, and production support activities.
Required Skills
- Strong knowledge of SAP GRC Access Control.
- Hands-on experience with SAP Risk Management / Access Risk Analysis.
- Good understanding of SAP authorization concepts, roles, profiles, users, and transactions.
- Experience with SoD, critical access, mitigating controls, and compliance processes.
- Knowledge of MSMP workflow configuration and GRC connectors.
- Experience integrating GRC with SAP ECC and/or S/4HANA.
- Good understanding of SAP security and audit requirements.
- Strong analytical, communication, and problem-solving skills.
Preferred Skills
- SAP S/4HANA security experience.
- Knowledge of SAP Fiori and CDS authorization concepts.
- Experience with SAP Cloud Identity Access Governance (IAG).
- Knowledge of ITGC, SOX, and internal control frameworks.
- SAP GRC certification is an advantage.
Education
Bachelor’s degree in Computer Science, Information Technology, Engineering, or a related field.
Responsibilities in Risk Management
- Identify and assess access-related business risks.
- Maintain risk libraries and control frameworks.
- Define and monitor mitigating controls.
- Perform periodic risk assessments and remediation tracking.
- Generate risk reports and dashboards for management and audit teams.
- Ensure SAP access controls align with organizational compliance requirements.



