Hi Everyone,

Greetings from Applied Business Consulting PVT LTD

Title: SAP GRC Security

Location: India

Duration: 12+ Months (Contract)

Description The SAP GRC Analyst will be responsible for designing, implementing and continuously enhancing Arm's SAP Governance, Risk and Compliance (GRC) Access Control solution, with primary responsibility for building and maintaining the SAP GRC ruleset and delivering new GRC capabilities across the SAP landscape. This role will be responsible for the design, configuration and continuous enhancement of SAP GRC Access Control, partnering with Business Process Owners, SAP Security and Functional teams to ensure the GRC solution accurately reflects evolving business processes and maintains compliance with SOX and internal control requirements.

In this position, you will own the SAP GRC ruleset and be responsible for designing, implementing and enhancing SAP GRC capabilities, including Segregation of Duties (SoD) governance, User Access Review (UAR), Emergency Access Management (EAM), Access Request Management (ARM), mitigating controls and Access Risk Analysis (ARA). You will play a key role in evolving Arm's SAP GRC capability by ensuring recent business processes, SAP applications, SAP Security role changes and organisational changes are appropriately assessed and incorporated into the GRC framework, while embedding governance and compliance into day-to-day SAP Security operations.

Success in this role requires strong hands-on experience with both SAP GRC Access Control with excellent analytical skills and the ability to collaborate with technical and business stakeholders to continuously improve governance, risk management, and compliance across the SAP estate.

Candidates must hold a bachelor's degree or higher in Computer Science, Information Systems, Engineering, or a related discipline, and possess at least 7 years of SAP Security experience, including a minimum of 5 years hands-on experience with SAP GRC Access Control, supporting large,



complex SAP environments.

Key Responsibilities

- Own the design and maintain the SAP GRC Access Control ruleset, including Business Functions, Actions, Permissions, Risks, Critical Access Risks and Mitigating Controls.
- Design, build and maintain Segregation of Duties (SoD) rules aligned with evolving business processes, SAP functionality and organisational changes.
- Own the governance and continuous improvement of the SAP GRC ruleset by assessing new SAP functionality, Fiori applications, organisational changes and business processes, ensuring the ruleset remains aligned with SAP best practices, audit requirements and evolving business risks.
- Partner with Business Process Owners to identify new business risks, validate SoD conflicts, review critical transactions and define appropriate mitigating controls.
- Perform user, role and profile Access Risk Analysis (ARA), providing recommendations to SAP Security and business stakeholders.
- Support SAP implementation and transformation programmes by analysing new business processes, SAP applications and organisational changes, ensuring they are accurately reflected within the SAP GRC ruleset.
- Design, configure and implement SAP User Access Review (UAR), working with business stakeholders to establish review campaigns, certification workflows, reporting and remediation processes.
- Support Emergency Access Management (EAM), including Firefighter ID administration, controller reviews, owner approvals and monitoring of privileged access usage.
- Develop and enhance SAP GRC reporting, dashboards and analytics to support ongoing governance, compliance monitoring,



User Access Reviews, Emergency Access Management and management reporting
- Develop and maintain GRC governance documentation, operating procedures, standards and user guidance.
- Work closely with SAP Security, Functional teams and Business Process Owners to ensure SAP GRC processes are fully integrated into Business-as-Usual (BAU) operations, including role design, access provisioning, change management and ongoing compliance activities.
- Support continuous improvement initiatives to enhance automation, governance and operational efficiency across SAP GRC processes.

Required Skills and Experience

- Strong hands-on experience with SAP GRC Access Control 12.x and SAP Security knowledge in SAP S/4HANA environments.
- Proven experience building, maintaining and enhancing SAP GRC Segregation of Duties (SoD) rulesets.
- Strong knowledge of SAP authorisation concepts, role design methodologies, organisational level security and SAP Fiori authorisation concepts.
- Experience implementing or enhancing:

- Access Risk Analysis (ARA)
- User Access Review (UAR)
- Emergency Access Management (EAM)
- Access Request Management (ARM)

- Strong understanding of:
- Segregation of Duties (SoD)
- Critical Access Risks
- Business Functions
- Actions
- Permissions
- Mitigating Controls
- Experience working directly with Business Process Owners to review business processes, assess risks and define appropriate controls.
- Strong understanding of SAP authorisation concepts, organisational level security, SAP Fiori authorisations and role design methodologies.
- Experience supporting SOX compliance, Internal Controls and audit activities.
- Experience analysing SAP role designs and identifying potential access risks.
- Strong analytical, problem-solving and stakeholder management skills.
- Excellent communication, documentation and presentation skills.

Interested Candidate please send your resume [HIDDEN TEXT]

📌 SAP GRC Security (India)
🏢 Applied Business Consulting
📍 India