SAP GRC Designer

Job Title: SAP GRC Role Designer
Location: Remote / India / must be able to work EST hours
Duration: Long Term Contract

Job Summary: The SAP GRC Role Designer is responsible for designing, building, and optimizing secure, compliant, and scalable role-based access controls across SAP GRC modules Access Control, Process Control, Risk Management, and Internal Audit Management. This role works closely with business units, IT security, and audit/compliance teams to ensure alignment with regulatory requirements and enterprise governance frameworks.

Key Responsibilities:
Role Design & Access Governance
Design and maintain roles and authorizations across SAP GRC Access Control, Process Control, Risk Management, and Internal Audit modules
Align roles with SAP S/4HANA authorization concepts under the clean core principle
Create and manage Business Roles via SAP GRC BRM (Business Role Management)
Develop and manage Segregation of Duties (SoD) rulesets using GRC Access Risk Analysis (ARA)
Implement Emergency Access Management (EAM) with firefighter roles

GRC Integration & Controls Enablement
Integrate SAP GRC modules with core SAP S/4HANA, SAP BTP extensions, and third-party systems
Configure control frameworks within Process Control for testing and certification
Align key risk indicators (KRIs) and automated monitoring via Continuous Control Monitoring (CCM)
Support audit planning, issue management, and evidence collection in Internal Audit Management

System & Data Governance
Collaborate with SAP MDG teams to ensure roles are linked to data governance principles
Ensure batch data migration via SAP BDC aligns with secure role setup and legacy data traceability
Contribute to SAP DataSphere access strategies and governed reporting permissions

Cross-System & Business Integration
Ensure access design supports end-to-end business areas such as Supply Chain, Sales, Manufacturing, Finance, and Procurement
Support integration with SAP Ariba, SAP Concur, SAP GTS, and SAP EWM for secure and compliant cross-platform access

Compliance & Audit Support
Facilitate internal/external audits and SOX/ITcompliance reporting
Conduct periodic user access reviews, access recertifications, and control testing

Key Technology Pillars:
SAP GRC (Access Control, Process Control, Risk Management, Internal Audit Management)
SAP S/4HANA (RISE with SAP)
SAP BTP (Low-code/No-code, Workflow, Integration Suite)
SAP DataSphere, SAP MDG, SAP BDC
SAP Ariba, SAP Concur, SAP GTS, SAP IBP, SAP EWM

Required Skills & Experience:
6+ years in SAP Security or SAP GRC roles
Strong experience with SAP GRC Access Control (ARA, BRM, ARM, EAM)
Working knowledge of SAP GRC Process Control, Risk Management, and Audit Management
Experience in role design across multiple business functions and regulatory landscapes
Familiarity with SAP authorization concepts for SAP S/4HANA (Fiori and GUI)
Exposure to compliance standards (SOX, GDPR, ISO 27001, etc.)
Strong documentation and stakeholder engagement skills

Preferred Qualifications:
SAP GRC or SAP Security certification
Hands-on experience with RISE with SAP transformation
Understanding of clean core and extensibility via SAP BTP
Project experience in global SAP implementations

Work Environment:
Global cross-functional collaboration with IT, Compliance, Audit, and Business Process Owners