SAP Security GRC Lead

Role: SAP GRC Senior Lead

Location: Newark, NJ

Type: C2H

·         8+ years of hands-on experience configuring SAP GRC Access Control, including MSMP workflow, BRF+ configuration, connector setup, rule set creation, and master data management

·         Proven experience implementing SAP security and GRC in S/4HANA transformation programs, with a strong understanding of GRC's role in project lifecycles

·         Deep knowledge of SAP security role-based access controls, IT General Computer Controls, segregation of duties, sensitive access risks, and mitigating controls

·         Expertise in SAP identity management concepts such as user provisioning, access reviews, terminations, and single sign-on

·         Ability to collaborate effectively with SAP Basis, Identity, and Architecture teams to design integrated security solutions involving GRC

·         Experience with SAP Cloud Identity Access Governance (IAG) implementation is a plus

·         Strong communication skills to present complex GRC and security topics to both technical and business audiences.

·         What will be your key responsibilities?

·         Own the end-to-end SAP GRC solution for the new S/4HANA on RISE Digital Core landscape

·         Design and enhance SAP GRC solution architecture to meet evolving business needs

·         Integrate SAP GRC with other systems and data sources to ensure seamless compliance management

·         Configure GRC Access Control workflows, rule sets, and security roles with precision

·         Manage GRC master data setup and conduct thorough testing aligned with S/4HANA transformation phases

·         Develop test plans, coordinate testing activities, and troubleshoot complex GRC issues

·         Create and maintain comprehensive GRC configuration and training documentation

·         Lead knowledge transfer sessions to Mars SAP Security AMS support teams to ensure smooth steady-state operations

·         Support SAP Security Project Team in planning and incorporating GRC tasks into S/4 implementation timelines an status reporting