SAP GRC with Risk Management

Technologies / Enterprise Systems / SAP; United Arab Emirates; On-site; AED 300,000 - 540,000; Full time

Job summary

Technologies / Enterprise Systems / SAP is seeking an experienced SAP GRC Specialist in the United Arab Emirates to lead implementation, configuration, and support of SAP GRC Access Control and Risk Management. The role requires 8-10 years of experience and full-time employment.

You will configure ARA, ARM, BRM, EAM, perform SoD analyses, integrate with ECC/S/4HANA, and collaborate with audit teams to mitigate risks. A Bachelor's degree is required.

Qualifications

• Experience implementing and configuring SAP GRC solutions.
• Knowledge of SAP authorization concepts and roles.
• Familiarity with ITGC/SOX controls and audits.

Responsibilities

• Implement, configure, and support SAP GRC Access Control and Risk Management.
• Configure ARA, ARM, BRM, and EAM/Firefighter.
• Perform SoD and critical access risk analysis.
• Maintain risk rules, functions, risks, and mitigating controls.
• Conduct user and role access reviews and remediation.
• Work with audit teams to identify and mitigate GRC risks.
• Integrate SAP GRC with ECC/S/4HANA and other systems.
• Troubleshoot workflows, connectors, and authorization issues.
• Prepare documentation and participate in upgrades.

Skills

SAP GRC

Risk Management

Access Risk Analysis

SoD & Access

GRC Connectors

MSMP workflow

ECC/S4HANA

SAP Security

Analytical skills

Communication skills

Education

Bachelor's degree in CS/IT/Engineering

Job description

Experience : 8 - 10 Years.

Employment Type: Full-Time

Key Responsibilities

• Implement, configure, and support SAP GRC Access Control and Risk Management solutions.
• Configure Access Risk Analysis (ARA), Access Request Management (ARM), Business Role Management (BRM), and Emergency Access Management (EAM/Firefighter).
• Perform Segregation of Duties (SoD) and critical access risk analysis.
• Configure and maintain risk rules, functions, risks, mitigating controls, and business processes.
• Conduct periodic user and role access reviews and support remediation of access violations.
• Work with business and audit teams to identify, assess, and mitigate SAP access and compliance risks.
• Integrate SAP GRC with SAP ECC/S/4HANA and other connected systems.
• Troubleshoot GRC workflows, connectors, synchronization issues, and authorization problems.
• Support internal/external audits and provide evidence related to access controls and compliance.
• Prepare functional specifications, configuration documents, test scripts, and user documentation.
• Participate in GRC upgrades, enhancements, testing, and production support activities.

Required Skills

• Strong knowledge of SAP GRC Access Control.
• Hands-on experience with SAP Risk Management / Access Risk Analysis.
• Good understanding of SAP authorization concepts, roles, profiles, users, and transactions.
• Experience with SoD, critical access, mitigating controls, and compliance processes.
• Knowledge of MSMP workflow configuration and GRC connectors.
• Experience integrating GRC with SAP ECC and/or S/4HANA.
• Good understanding of SAP security and audit requirements.
• Strong analytical, communication, and problem-solving skills.

Preferred Skills

• SAP S/4HANA security experience.
• Knowledge of SAP Fiori and CDS authorization concepts.
• Experience with SAP Cloud Identity Access Governance (IAG).
• Knowledge of ITGC, SOX, and internal control frameworks.
• SAP GRC certification is an advantage.

Education

Bachelor's degree in Computer Science, Information Technology, Engineering, or a related field.

Responsibilities in Risk Management

• Identify and assess access-related business risks.
• Maintain risk libraries and control frameworks.
• Define and monitor mitigating controls.
• Perform periodic risk assessments and remediation tracking.
• Generate risk reports and dashboards for management and audit teams.
• Ensure SAP access controls align with organizational compliance requirements.