- Own the design and maintain the SAP GRC Access Control ruleset, including Business Functions, Actions, Permissions, Risks, Critical Access Risks and Mitigating Controls.
- Design, build and maintain Segregation of Duties (SoD) rules aligned with evolving business processes, SAP functionality and organisational changes.
- Own the governance and continuous improvement of the SAP GRC ruleset by assessing new SAP functionality, Fiori applications, organisational changes and business processes, ensuring the ruleset remains aligned with SAP best practices, audit requirements and evolving business risks.
- Partner with Business Process Owners to identify new business risks, validate SoD conflicts, review critical transactions and define appropriate mitigating controls.
- Perform user, role and profile Access Risk Analysis (ARA), providing recommendations to SAP Security and business stakeholders.
- Support SAP implementation and transformation programmes by analysing recent business processes, SAP applications and organisational changes,



ensuring they are accurately reflected within the SAP GRC ruleset.
- Design, configure and implement SAP User Access Review (UAR), working with business stakeholders to establish review campaigns, certification workflows, reporting and remediation processes.
- Support Emergency Access Management (EAM), including Firefighter ID administration, controller reviews, owner approvals and monitoring of privileged access usage.
- Develop and enhance SAP GRC reporting, dashboards and analytics to support ongoing governance, compliance monitoring, User Access Reviews, Emergency Access Management and management reporting
- Develop and maintain GRC governance documentation, operating procedures, standards and user guidance.
- Work closely with SAP Security, Functional teams and Business Process Owners to ensure SAP GRC processes are fully integrated into Business-as-Usual (BAU) operations, including role design, access provisioning, change

📌 SAP GRC (India)
🏢 TRIGENT SOFTWARE PRIVATE
📍 India