Overview:

We are seeking an experienced professional with 35 years of hands-on experience in SAP Risk and Controls. The ideal candidate should have strong expertise in SAP ECC/S/4HANA environments, core business processes, and control frameworks. In this role, the individual will function as a Subject Matter Expert (SME), lead key project activities, and play a critical role in ensuring high-quality project execution and strong client satisfaction.

Key Responsibilities:

- Project Execution & Consultation: Lead and contribute to all phases of SAP risk and controls engagements, including pre / post-implementation reviews, and comprehensive application/Infra control testing, Audit trail assessments etc., while providing informed guidance to clients and project teams.
- Subject Matter Expert (SME): Serve as a functional/technical SME within project teams, ensuring the successful delivery of solutions.
- Process Analysis: Conduct thorough process walkthroughs and targeted inquiries to understand the client’s system landscape, transaction flows, and overall business processes comprehensively.
- Client Engagement & Risk Management: Lead client discussions, effectively reporting observations, highlighting potential risks, and driving consensus on corrective actions.
- Problem Solving: Focus on resolving complex client issues and challenges through innovative and practical solutions.
- Communication & Reporting: Adhere to established communication protocols for consistently reporting project status, risks, and mitigation plans to stakeholders and project leadership.
- Additional Responsibilities for Senior Consultants

1. Team Collaboration & Mentorship: Collaborate effectively across project teams, providing guidance, functional/technical support, and mentorship to junior team members during project activities.

2. Business Development & Innovation: Support business development via contributing to Proof of Concept (PoC)



builds for client presentations and support in developing internal assets/accelerators.

3. Client Relationship: Manage client relationships through active engagement with client SPOCs.

Educational Qualifications:

- Qualifications: BE/B-Tech/BSC-IT/MCA/MBA/CA

Work Experience:

- Total Experience: The candidate must have 3-5 years of relevant experience in a similar role.

Mandatory Technical & Functional Skills:

- Controls Testing Expertise: Experience in testing IT Application Controls (ITAC), IT General Controls (ITGC), and key reports (IPE)
- SAP Business Process Knowledge: Strong understanding of core SAP business processes including Order-to-Cash (OTC), Procure-to-Pay (PTP), and Record-to-Report (RTR), along with knowledge of control frameworks, Sensitive Access (SA), and Segregation of Duties (SoD) concepts across SAP ECC and SAP S/4HANA
- Risk Assessment: Experience in performing risk and controls assessments covering application security, system access, business process controls, and automated controls
- Audit & Review Experience: Hands-on experience across SAP audits and implementation reviews, including process walkthroughs, Test of Design (ToD), Test of Operating Effectiveness (ToE), business impact analysis, observation drafting, and stakeholder discussions

Specialization: Candidates should demonstrate strong expertise in either SAP Functional Controls or SAP Security & GRC. Candidates with experience in both areas will be preferred.

Specialization 1 - SAP Functional Controls





- Hands-on experience in SAP configuration reviews, audit trail assessments, process control design, and control optimization
- Experience in implementation assurance, RACM design, configuration risk assessments, and business process control reviews.
- Exposure to data migration reviews, master data controls, and post-implementation control assessments

Specialization 2 – SAP Security & GRC

- Strong experience in SAP Security, Authorizations and GRC Access Controls
- Hands-on experience in SAP role design, role remediation, SoD risk analysis, Sensitive Access reviews, emergency access management (Firefighter), user access reviews, and access provisioning
- Experience with SAP GRC Access Control or SAP IAG, SAP IDM/IPS, or other IAM/GRC solutions
- Understanding of authorization concepts, security administration, role redesign, mitigating controls, and security governance across SAP ECC and SAP S/4HANA

Qualified Requirements & Personal Attributes:

- Preferred Qualifications & Certifications
- Certifications in relevant SAP functional modules, SAP Security/GRC, or CISA are preferred
- Core Competencies & Attributes
- Drive & Work Ethic: Possess strong personal drive and a positive work ethic, capable of delivering high-quality results within tight deadlines and demanding project situations.
- Adaptability: Exhibit flexibility and adaptability to a variety of engagement types, working hours, environments, and client locations
- Interpersonal Skills: Demonstrate strong communication, presentation, and team-building skills, fostering a collaborative and quality-focused culture.
- Continuous Learning: A commitment to constant self-development through continuous learning and obtaining relevant certifications.
- Teamwork: A proactive approach to fostering teamwork, knowledge sharing, and a strong quality culture across the team.

📌 SAP IT Audit Senior Consultant (Gurugram)
🏢 protiviti india
📍 Gurugram