Position: Sap GRC & Security

Location: BANGALORE

Experience: 10+ years

Job Summary

The Senior lead Analyst SAP Controls, Controls & Compliance is responsible for the design, implementation, monitoring, and continuous improvement of SAP application controls and compliance processes. This role partners with IT, Finance, Internal Audit, and Risk Management to ensure SAP systems comply with regulatory requirements, internal control frameworks, and organizational policies. The position plays a key role in supporting audits, risk assessments, and system control optimization.

Key Responsibilities

SAP Controls & ComplianceDesign, implement, and maintain SAP application controls (automated and manual) to support SOX, internal controls over financial reporting (ICFR), and other regulatory requirements.

Ensure SAP systems comply with relevant frameworks and standards (e.g., SOX, COSO, ITGC, GxP, ISO, GDPRas applicable).

Perform regular control assessments, gap analyses, and remediation planning for SAP environments (ECC, S/4HANA, BW, GRC, etc.).

SAP Security & GRCSupport SAP GRC Access Control, Process Control, and Risk Management solutions, including role design, segregation of duties (SoD) analysis, and mitigation controls.

Review and approve SAP roles, authorizations, and access changes in accordance with security and compliance standards.

Monitor and analyse access risks, control violations, and compliance exceptions.

Audit & Risk ManagementServe as a key liaison for internal and external auditors for SAP-related audits.

Prepare audit documentation, evidence, and walkthroughs related to SAP controls and compliance.

Track audit findings, support remediation activities, and ensure timely closure of issues.

System Analysis & Process Improvement





Analyse SAP business processes to identify control weaknesses and opportunities for automation or efficiency improvements.

Collaborate with business and IT stakeholders to embed controls into system designs, enhancements, and upgrades.

Support SAP projects, upgrades, and transformations (including S/4HANA) by ensuring controls are designed and tested appropriately.

Governance & Documentation

Develop and maintain SAP controls documentation, policies, procedures, and process flows.

Provide guidance and training to business and IT teams on SAP controls, compliance requirements, and best practices.

Required QualificationsBachelor’s degree in Information Systems, Computer Science, Accounting, Finance, or a related field.

9+ years of experience in SAP systems analysis, controls, compliance, or IT risk management.

Strong hands-on experience with SAP application controls and IT general controls (ITGC).

Experience supporting SOX compliance and audit activities in an SAP environment.

Solid understanding of SAP modules (e.g., FI/CO, MM, SD, HCM) and cross-functional business processes.

Preferred QualificationsExperience with SAP GRC (Access Control, Process Control, Risk Management).

Experience with SAP S/4HANA environments and migration projects.

Professional certifications such as CISA, CPA, CIA, SAP Security, or SAP GRC certification.

Experience in regulated industries (e.g., financial services, healthcare, pharmaceuticals, manufacturing).

Key Skills & CompetenciesStrong analytical and problem-solving skills.

Deep understanding of internal controls, risk management, and compliance concepts.

Ability to communicate complex technical and control concepts to non-technical stakeholders.

Excellent documentation, organizational, and project management skills.

Ability to work independently and collaboratively in a fast-paced workplace.

📌 Senior SAP GRC consultant - Cyber Security and Controls (Karnataka)
🏢 Hucon Solutions
📍 Karnataka