SAP GRC Consultant High

infosquash; Toronto; On-site; CAD 110,000 - 150,000; Full time

Job summary

infosquash in Toronto, Canada, seeks an experienced SAP GRC Consultant to support SAP implementation and ongoing governance initiatives. The role focuses on SAP GRC Access Control, Process Control, and Security Roles/Authorization Management, collaborating with auditors and IT security to ensure compliance and mitigate risks.

You will design and manage security roles across SAP S/4HANA, ECC, and integrated systems, lead risk analysis, and prepare reports for audits while guiding stakeholders on

Qualifications

• Minimum 6+ years of SAP Security and GRC experience with at least 2-3 full-cycle GRC implementations.
• Strong expertise in SAP GRC Access Control (ARA, ARM, BRM, EAM) and Process Control configuration and support.
• Proven hands-on experience in PFCG role design, authorization management, and access reviews.
• Solid understanding of SoD concepts, risk remediation, and compliance frameworks (e.g., SOX, GDPR, ISO).
• Experience in SAP S/4HANA Security design and Fiori role management.

Responsibilities

• Lead the implementation and configuration of SAP GRC Access Control modules (ARM, ARA, BRM, EAM) and Process Control components.
• Manage user access design, role administration, and role provisioning using PFCG and GRC workflows.
• Define and enforce Segregation of Duties (SoD) rules, mitigating controls, and compliance monitoring frameworks.
• Design, develop, and manage security roles and authorization concepts across SAP S/4HANA, ECC, and other integrated systems.
• Implement and manage risk analysis and remediation processes within SAP GRC.
• Support audit, compliance, and regulatory requirements by preparing reports and ensuring proper controls are in place.
• Work with stakeholders to align GRC solutions with business policies and risk management practices.
• Conduct user training and create documentation for GRC processes and role management standards.
• Collaborate with BASIS and functional teams to ensure secure and compliant system access.

Skills

SAP GRC

Access Control

Process Control

PFCG Role Design

SoD concepts

GRC remediation

S/4HANA Security

Fiori role management

Tools

PFCG

GRC workflows

Auditing reports

Job description

Job Description : We are seeking an experienced SAP GRC Consultant to support our SAP implementation and ongoing governance initiatives. The consultant will be responsible for implementing and managing SAP GRC solutions, focusing on Process Control (PC), Access Control (AC), and Security Roles/Authorization Management (PFCG). The role involves close collaboration with business stakeholders, auditors, and IT security teams to ensure compliance, mitigate risks, and streamline access management processes.

Key Responsibilities

• Lead the implementation and configuration of SAP GRC Access Control modules (ARM, ARA, BRM, EAM) and Process Control components.
• Manage user access design, role administration, and role provisioning using PFCG and GRC workflows.
• Define and enforce Segregation of Duties (SoD) rules, mitigating controls, and compliance monitoring frameworks.
• Design, develop, and manage security roles and authorization concepts across SAP S/4HANA, ECC, and other integrated systems.
• Implement and manage risk analysis and remediation processes within SAP GRC.
• Support audit, compliance, and regulatory requirements by preparing reports and ensuring proper controls are in place.
• Work with stakeholders to align GRC solutions with business policies and risk management practices.
• Conduct user training and create documentation for GRC processes and role management standards.
• Collaborate with BASIS and functional teams to ensure secure and compliant system access.

Required Skills & Experience

• Minimum 6+ years of SAP Security and GRC experience with at least 2-3 full-cycle GRC implementations.
• Strong expertise in SAP GRC Access Control (ARA, ARM, BRM, EAM) and Process Control configuration and support.
• Proven hands-on experience in PFCG role design, authorization management, and access reviews.
• Solid understanding of SoD concepts, risk remediation, and compliance frameworks (e.g., SOX, GDPR, ISO).
• Experience in SAP S/4HANA Security design and Fiori role management.