SAP GRC / Audit Management – 3LoD Consultant

- Experience: 10+ years
- Engagement: Contract / Project-Based
- Role: Senior Functional / Solution Consultant

Key Requirements:
- Strong hands-on SAP GRC implementation experience.
- SAP Audit Management implementation – Mandatory.
- Experience with SAP Process Control (PC) and SAP Risk Management (RM).
- Working knowledge of SAP Access Control & Security — SoD, UAM, ARM, EAM, BRM, UAR.
- Practical experience with the Three Lines of Defense (3LoD) model:
- 1st Line: Business, controls, self-assessment & remediation
- 2nd Line: Risk, compliance, control monitoring & testing
- 3rd Line: Internal audit, findings, recommendations & follow-up
- Experience implementing the end-to-end audit lifecycle:
- Audit planning → Engagement → Fieldwork → Findings → Management Response → Remediation → Follow-up → Closure
- Strong understanding of Risk → Control → Audit → Finding → Remediation traceability.
- Experience designing workflows, approvals,



escalations and reporting/dashboards.
- Integration experience with SAP S/4HANA/ECC, Fiori, HR/Identity systems and non-SAP platforms is preferred.
- Robust knowledge of internal controls, risk management, compliance and internal audit.
- Excellent customer-facing and stakeholder management skills.

Mandatory Screening: Candidates must be able to explain at least one actual SAP GRC / 3LoD implementation, including:
- Project scope & industry
- GRC modules implemented
- Individual responsibilities
- Audit Management implementation
- Risk & Control framework
- 3LoD processes
- Workflows/integrations
- Reporting & dashboards
- Key challenges and solutions
- Go-live status

Not Suitable: Candidates with only SAP Security / Access Control experience and no hands-on Audit Management, Process Control, Risk Management or 3LoD implementation experience.

📌 SAP GRC / Audit Management – 3LoD Consultant (India)
🏢 Glimmora International
📍 India