SAP GRC Specialist

The role

Every access request, every segregation of duties conflict, every compliance gap gets caught, addressed, and closed through the frameworks you build and maintain. You'll sit at the intersection of technology and governance, implementing and configuring SAP GRC solutions that keep the organization operating within regulatory bounds while giving the business room to move. You'll be the person stakeholders across the company turn to when they need to understand not just what SAP GRC can do, but what it should do for their specific risk landscape.

What you'll do

Implement and configure SAP GRC solutions across Access Control, Process Control, and Risk Management modules, tailored to specific business needs and compliance requirements

Collaborate with stakeholders across departments to conduct comprehensive risk assessments, identify vulnerabilities, and develop mitigation strategies

Design and implement governance frameworks, policies, and procedures that align with regulatory standards, industry best practices, and internal guidelines

Analyze business processes to identify segregation of duties (SoD) conflicts, and design role based access controls (RBAC) and authorization profiles that keep users limited to what they actually need

Provide ongoing support and maintenance for SAP GRC systems, including troubleshooting, performance optimization, and user training

Lead GRC related projects and process improvements that drive organizational maturity in risk management and compliance

Conduct regular audits and reviews of GRC processes and controls, evaluating effectiveness and recommending remedial actions

Serve as a subject matter expert and trusted advisor on GRC matters for senior management, internal stakeholders, and external auditors

Stay current on emerging regulatory requirements and GRC trends, and bring that insight back into the organization's risk and compliance posture

What we're looking for

Bachelor's degree in Information Technology, Business Administration, Finance, or a related field. A master's degree is a plus

8+ years of experience implementing, configuring, and maintaining SAP GRC solutions, with a focus on Access Control, Process Control, and Risk Management modules

Demonstrated expertise in risk assessments, governance framework development, and compliance program implementation in complex organizational environments

A proven track record of leading GRC related projects, initiatives, or audits

Professional certifications in SAP GRC and/or risk management (e.g., CISA, CRISC) are highly desirable

Strong technical proficiency in SAP ERP systems, SAP Security concepts, user provisioning, and role administration

Excellent written and verbal English

You’ll thrive here if you

You see access control as a design problem, not just a checkbox

You can spot a segregation of duties conflict before it becomes an audit finding

You're comfortable being the person both auditors and business teams come to for answers

You like translating regulatory requirements into frameworks people can actually work with

You want ownership over how governance and compliance actually function inside a business, not just theory on paper