全职 SAP GRC COnsultant 工作, 薪水, The ECEOs 公司招聘中 - Ricebowl

SAP GRC Consultant – 5+ Years ExperienceRole Overview
We are looking for an experienced SAP GRC Consultant with 5+ years of hands-on experience in SAP GRC Access Control and SAP Security. The consultant will be responsible for implementing, configuring, and supporting SAP GRC solutions across SAP ECC and S/4HANA environments, with a strong focus on access governance, Segregation of Duties (SoD), compliance, and authorization management.Key Responsibilities

• Configure, implement, and support SAP GRC Access Control solutions across SAP ECC and S/4HANA landscapes.
• Work extensively on GRC ARA, ARM, EAM/Firefighter, and BRM modules.
• Perform Segregation of Duties (SoD) analysis, risk identification, remediation, and mitigation.
• Design and maintain SAP security roles, business roles, composite roles, derived roles, and authorization concepts.
• Configure and maintain GRC workflows, MSMP, BRF+, connectors, connector groups, and synchronization jobs.
• Manage user access requests, approvals, provisioning, role assignments, and de-provisioning.
• Configure and administer Firefighter IDs, owners, controllers, and log review processes.
• Develop and maintain GRC rulesets, functions, risks, actions, permissions, and mitigation controls.
• Perform role redesign, authorization cleanup, access reviews, and periodic user access certification.
• Troubleshoot GRC integration and authorization issues and coordinate with SAP Basis, Security, and functional teams.
• Support SAP S/4HANA and Fiori security and authorization requirements.
• Participate in GRC implementation, rollout, upgrade, migration, enhancement, and production support projects.
• Work with business process owners and compliance teams to understand access requirements and control risks.
• Support SOX, ITGC, internal/external audit, and compliance activities and provide audit evidence.
• Prepare functional specifications, configuration documents, test scripts, training materials, and operational documentation.
• Conduct SIT/UAT testing, support defect resolution, and coordinate with technical teams.
• Provide production support and resolve SAP GRC/Security incidents within agreed SLAs.
• Analyze existing security and GRC processes and recommend improvements to access governance and controls.
  

Required Technical Skills

• 5+ years of experience in SAP GRC and/or SAP Security, with strong hands-on experience in SAP GRC Access Control.
• Strong hands-on experience in:
• SAP GRC ARA – Access Risk Analysis
• SAP GRC ARM – Access Request Management
• SAP GRC EAM – Emergency Access Management
• SAP GRC BRM – Business Role Management
• Strong knowledge of SAP Security and Authorization concepts.
• Hands-on experience with PFCG, SU01, SU24, SU53, SU56, ST01/STAUTHTRACE.
• Experience with SAP GRC configuration through SPRO.
• Strong understanding of SoD rulesets, risks, functions, actions, permissions, remediation, and mitigation controls.
• Experience configuring and maintaining GRC connectors and backend system integration.
• Experience with user and role synchronization, repository synchronization, and authorization synchronization.
• Strong understanding of MSMP workflow configuration and BRF+ rules.
• Experience with Firefighter/EAM configuration and log monitoring.
• Good understanding of SAP ECC and S/4HANA security.
• Experience with SAP Fiori security and authorization concepts.
• Experience supporting SAP GRC implementations, upgrades, enhancements, and production environments.
• Understanding of SAP security audit, access certification, and compliance requirements.