SAP Security & GRC Consultant

Grifols, S.A; Parets del Vallès; Hybrid; EUR 45,000 - 65,000; Full time

Benefits offered by this job

Hybrid work model

Flexible schedule

Permanent contract

Job summary

Grifols is seeking an IT Apps Functional Analyst to govern SAP access management across its global organization, ensuring proper governance, administration, and compliance.

You will work with IT & Data teams to manage SAP authorizations, support SoD risk mitigation, GRC processes, and SOX controls within a multinational, regulated environment.

Qualifications

• Bachelor’s degree in IT, engineering, business admin, or related field.
• 4+ years of experience in SAP Authorizations, SAP Security, SAP GRC, or similar roles.
• Experience managing SAP roles, user access, and authorization concepts.
• Knowledge of SAP GRC, particularly ARA and EAM modules.
• Experience in regulated environments with audit and compliance requirements.
• Valuable SOX controls experience in multinational or publicly listed companies.
• Understanding of SoD principles and access governance.
• Strong analytical, detail-oriented, and accountable; good communication.
• Intermediate-Advanced English proficiency.

Responsibilities

• Manage SAP user access requests, role assignments, and authorization changes across different business areas.
• Maintain and support SAP security roles and authorization models aligned with business requirements.
• Participate in designing, maintaining, and improving SAP authorization frameworks.
• Support onboarding activities, new company integrations, and organizational changes requiring SAP access provisioning.
• Ensure timely resolution of access-related tickets and incidents while maintaining compliance standards.
• Support and maintain SAP GRC processes, including Access Risk Analysis (ARA) and Emergency Access Management (EAM).
• Identify segregation of duties (SoD) risks and collaborate with stakeholders to mitigate.
• Ensure compliance with internal governance policies and regulatory requirements.
• Contribute to continuous improvement of SAP security and access control processes.
• Support internal and external audit activities related to SAP security and user access management.
• Execute and document SOX controls linked to SAP authorizations and access governance.
• Prepare periodic audit evidence, compliance reports, and control documentation.
• Collaborate with auditors and stakeholders to ensure adherence to controls and remediation plans.
• Promote a strong compliance mindset and understand the impact of authorization decisions.
• Participate in global SAP projects and cross-region initiatives.

Skills

Analytical skills

Stakeholder management

Attention to detail

Team player

English communication

Regulatory/compliance knowledge

Education

Bachelor’s Degree in Information Technology, Engineering, Business Administration, or related field

Tools

SAP Authorizations

SAP Security

SAP GRC

SoD concepts

SOX controls

Job description

Would you like to join an international team working to improve the future of healthcare? Do you want to enhance the lives of millions of people? Grifols is a global healthcare company that since 1909 has been working to improve the health and well-being of people around the world. We are leaders in plasma-derived medicines and transfusion medicine and develop, produce and market innovative medicines, solutions and services in more than 110 countries and regions.

We believe that diversity adds value to our business, our teams, and our culture. We are committed to equal employment opportunities, fostering an inclusive environment where diversity makes us outstanding.

Mission

As an IT Apps Functional Analyst, you will be responsible for ensuring the proper governance, administration, and compliance of SAP access management across Grifols global organization. Working within the IT & Data area, you will support business users and projects by managing SAP authorizations, maintaining security roles, and ensuring compliance with internal controls and audit requirements.

What your responsibilities will be

• SAP Authorization & Access Management
  • Manage SAP user access requests, role assignments, and authorization changes across different business areas.
  • Maintain and support SAP security roles and authorization models aligned with business requirements.
  • Participate in the design, maintenance, and continuous improvement of SAP authorization frameworks.
  • Support onboarding activities, new company integrations, and organizational changes requiring SAP access provisioning.
  • Ensure a timely resolution of access-related tickets and incidents while maintaining compliance standards.
• SAP GRC & Compliance
  • Support and maintain SAP GRC processes, particularly:
  • Access Risk Analysis (ARA)
  • Emergency Access Management (EAM)
  • Identify segregation of duties (SoD) risks and collaborate with stakeholders to implement appropriate mitigations.
  • Ensure compliance with internal governance policies and regulatory requirements.
  • Contribute to the continuous improvement of SAP security and access control processes.
• Audit & SOX Controls
  • Support internal and external audit activities related to SAP security and user access management.
  • Execute and document SOX controls linked to SAP authorizations and access governance.
  • Prepare periodic audit evidence, compliance reports, and control documentation.
  • Collaborate with auditors and business stakeholders to ensure adherence to established controls and remediation plans.
  • Promote a strong compliance mindset, understanding the potential business impact of authorization and security decisions.
• Project & Global Support
  • Participate in global projects involving SAP systems, organizational growth initiatives, and business transformations.
  • Collaborate with IT teams and business stakeholders across different regions and countries.
  • Provide support to all Grifols companies globally, ensuring consistency in authorization and compliance practices.
  • Contribute to knowledge sharing and process standardization within the team.

Who you are

To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skills, education, and/or ability required. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions).

• Bachelor’s Degree in Information Technology, Engineering, Business Administration, or a related field.
• 4+ years of experience in SAP Authorizations, SAP Security, SAP GRC, or similar roles.
• Experience managing SAP roles, user access, and authorization concepts.
• Knowledge of SAP GRC, particularly ARA and EAM modules.
• Experience working in regulated environments with audit and compliance requirements.
• Valuable experience supporting SOX controls within multinational or publicly listed companies.
• Understanding of Segregation of Duties (SoD) principles and access governance.
• Strong analytical skills, attention to detail, and sense of accountability.
• Team player with excellent communication and stakeholder management skills.
• Intermediate - Advanced English level, both written and spoken.

What we offer

It is a brilliant opportunity for you, Grifols is fully aware that its employees are one of its major assets. We are committed to maintaining an atmosphere that encourages all our employees to develop their professional careers in an excellent working environment.

We believe in diverse talent and want to remove any barriers that may hinder your participation. If you require any adjustments in our selection process, please do not hesitate to inform us when applying. We are here to help.

Grifols is an equal opportunity employer.

Flexibility for U Program: Hybrid Model

Flexible schedule: Monday-Thursday 7-10 to 16-19h and Friday 8-15h. (with the same flexible start time).

Benefits package

Contract of Employment: Permanent position