Business Relationship Officer - Security & GRC Lead

Indorama Ventures Public Company Limited; Mumbai; On-site; INR 1,200,000 - 2,000,000; Full time

Benefits offered by this job

Competitive compensation package

Health insurance

WellHub / TotalPass

Life insurance

Additional exclusive benefits

Job summary

Indorama Ventures Public Company Limited is hiring an SAP Security & GRC Lead. This role is crucial in managing SAP security architecture, ensuring compliance and risk mitigation. Responsibilities include leading security administration across systems, designing authorization concepts, and preparing audit documentation.

The ideal candidate should have 8–10 years of SAP Security experience, excellent analytical skills, and a Bachelor's degree in a relevant field. Competitive benefits and a diverse working environment are offered.

Qualifications

• Experience of 8–10 years in SAP Security & GRC.
• Familiarity with ERP systems like SAP and Oracle.
• Knowledge of compliance standards like SOX, ITGC, GDPR.
• Experience in SAP Audit & Access Controls.

Responsibilities

• Lead end-to-end SAP security administration across various systems.
• Design and maintain authorization concepts and role architecture.
• Perform advanced authorization troubleshooting using SU53.
• Manage user administration including role assignments.
• Drive continuous audit readiness and support license audits.

Skills

SAP ECC & S/4HANA Security

SAP GRC Access Control 10.1 / 12.0

Fiori Security & Gateway Authorizations

SoD Risk Analysis & Mitigation

Authorization Troubleshooting (SU53, ST01, STAUTHTRACE)

Excellent analytical skills

Problem-solving skills

Communication skills

Education

Bachelor’s degree in business, engineering, or related field

Job description

Overview

The SAP Security & GRC Lead is responsible for defining, managing, and governing SAP security architecture, and continuously improving Security & SAP GRC processes across Indovina. This role ensures secure access management, regulatory compliance, audit readiness, and risk mitigation while partnering closely with business, IT, audit, and compliance teams.

Key Responsibilities

• Lead end-to-end SAP security administration across ECC, S/4HANA, BW/BI, MDG, CRM, Ariba, and related systems.
• Design and maintain authorization concepts and role architecture (Single, Composite, Derived, Business, and Fiori roles).
• Maintain and optimize SU24 authorization proposals for standard and custom transactions; perform advanced authorization troubleshooting using SU53, ST01, STAUTHTRACE, SM20, SUIM.
• Manage mass user administration (user provisioning, role assignments, locking/unlocking, validity extensions).
• Lead implementation and operational support of SAP GRC Access Control (10.1 / 12.0): Access Risk Analysis, Access Request Management, Emergency Access Management (EAM / Firefighter), Business Role Management, User Access Review, and review MSMP workflows, BRF+ rules, and request path approvals.
• Manage SoD rule sets, risk functions, mitigation controls, and simulation scenarios; ensure effective Firefighter access governance, including FFID ownership and log monitoring.
• Perform periodic risk analysis, remediation, and mitigation assignments at user and role level.
• Design and support Fiori security (catalogs, groups, spaces, tiles, 0Data service authorizations); troubleshoot Fiori authorization issues using system traces and error logs.
• Act as SAP security & GRC SPOC for internal & external audits (SOX, ITGC, GDPR, SOC, etc.); prepare audit evidence, access reports, and remediation documentation.
• Drive continuous audit readiness, access reviews, and control effectiveness; support license audits and optimization initiatives through role and access analysis.
• Maintain SAP risk registers aligned with enterprise GRC and compliance frameworks; ensure adherence to enterprise security policies and regulatory controls.
• Coordinate SAP security activities with Corporate Security, Basis, Functional, and Infrastructure teams; ensure secure user lifecycle management for joiner, mover, leaver processes.
• Generate GRC dashboards, risk reports, firefighter usage reports, and management summaries; identify and implement process improvements to reduce provisioning time and audit findings.
• Mentor junior consultants or analysts and foster a collaborative team environment; bring strong thought‑leadership mindset with clear understanding of business requirements and SAP solutions.

Required Knowledge & Skills

• Technical: SAP ECC & S/4HANA Security, SAP GRC Access Control 10.1 / 12.0, Fiori Security & Gateway Authorizations, SoD Risk Analysis & Mitigation, Authorization Troubleshooting (SU53, ST01, STAUTHTRACE).
• Experience: 8–10 years of SAP Security & GRC experience; familiarity with ERP systems (SAP, Oracle) and compliance standards; knowledge of SOX, ITGC, GDPR; SAP Audit & Access Controls, license and security compliance.
• Soft Skills: Excellent analytical, problem‑solving, and communication skills; ability to engage both technical and non‑technical audiences.
• Preferred: SAP Security / GRC Certifications.
• Education: Bachelor’s degree in business, engineering, or related field.

Benefits

• Competitive compensation package.
• Health insurance.
• WellHub / TotalPass.
• Life insurance.
• Additional exclusive benefits.

Diversity & Inclusion

The organization values flexibility, partnership, and believes that the impact of its actions goes far beyond the chemical industry. Diversity matters; the working environment is inclusive, diverse, and guided by respect, ethics, and equal opportunities for all.