Risk Consulting - Digital risk - SAP GRC

Ernst & Young Advisory Services Sdn Bhd; Ernakulam; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

EY in Kerala seeks a Senior SAP GRC/IT risk professional to support client engagements across SAP ECC and SAP S/4HANA. You will conduct walkthroughs, testing and documentation for ITGC, ITAC and automated controls, collaborating with client and audit teams.

Ideal candidates have exposure to SOX/ICOFR, strong Excel skills and the ability to deliver high-quality outputs under deadlines while traveling to onsite client locations as required.

Qualifications

• Strong English communication and analytical approach.
• Experience in SAP GRC, SAP ECC/S/4HANA security, ITGC/ITAC testing.
• Familiarity with evidence review and documentation standards.
• Knowledge of SOX/ICOFR IT risk concepts.
• Proficient Excel and documentation skills.

Responsibilities

• Support SAP GRC, SAP ITAC and IT risk projects across SAP ECC/S4HANA.
• Perform control walkthroughs, evidence review and ITGC/ITAC testing.
• Help document SAP IT application controls and automated controls.
• Conduct SoD and sensitive access reviews and remediation follow-ups.
• Prepare test workpapers, issue logs and status updates.

Skills

Strong English communication

Analytical & detail-oriented

Ability to work under pressure

Collaboration with stakeholders

Project discipline & ownership

Education

Bachelor’s degree in Information Systems/CS/Accounting/Finance

Tools

MS Office

Excel

Power BI

ACL or similar data analysis tools

Job description

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.

Other locations: Anywhere in Country

EY | Digital Risk

Employment type - Full-time

Primary skill - SAP GRC Access Control, SAP ITAC, ITGC

Role overview

As part of Risk Consulting, the Senior will support client engagements related to SAP GRC, SAP IT application controls, IT general controls, internal audit and risk management for clients across the MENA region. The role is intended for hands‑on SAP GRC and ITAC professionals who can execute high‑quality testing, documentation and analysis in a fast‑growing SAP GRC practice.

The opportunity

We are looking for experienced professionals with SAP GRC, SAP security, ITAC and ITGC exposure to join the Risk Consulting - Digital Risk team. This role provides an opportunity to work on varied SAP GRC and IT controls engagements, develop deeper consulting skills and contribute to building a strong SAP GRC delivery capability in Kerala.

Your key responsibilities

• Support execution of SAP GRC, SAP ITAC and IT risk consulting projects across SAP ECC and SAP S/4HANA environments.
• Perform control walkthroughs, evidence review and testing for ITGC, ITAC and automated business controls in line with project methodology.
• Assist in the assessment, design and documentation of SAP IT application controls and automated controls.
• Conduct SoD and sensitive access reviews, including data analysis, rule set review, exception validation and remediation follow‑up.
• Support SAP GRC Access Control testing, including workflow validation, access risk analysis, emergency access and user access review activities as applicable.
• Prepare and maintain project deliverables such as RCMs, testing workpapers, issue logs, evidence trackers and status updates.
• Assist with data extraction and analysis for access management, control monitoring, process compliance and audit support.
• Collaborate with internal teams, client stakeholders and audit teams to collect system/process information and close documentation gaps.
• Follow firm quality standards for testing, documentation and deliverable preparation.
• Communicate clearly and proactively to support issue resolution, follow‑up and project delivery.

Skills and attributes for success

• Strong spoken and written English with clear business communication skills.
• Analytical, organized and detail‑oriented approach to testing, documentation and evidence review.
• Ability to work well under pressure and deliver quality outputs within defined deadlines.
• Strong collaboration skills with the ability to work with internal teams, clients and auditors.
• Good understanding of project discipline, task ownership and quality expectations.
• Proficiency in MS Office, working knowledge of Excel, Power BI, ACL or similar data analysis tools is preferred.
• Flexibility to travel to onsite locations at short notice, based on client and engagement requirements.

To qualify for the role, you must have

• 3-6 years of experience in SAP GRC, SAP security, SAP ECC, SAP S4 HANA, IT audit, compliance testing or technology risk consulting.
• Exposure to SAP is required, exposure to SAP ECC/S/4HANA security, Oracle security or other ERP security models is preferred.
• Understanding of ERP system landscapes, access control concepts, SoD, sensitive access and user access review processes.
• Knowledge of ITGC, ITAC, RCM documentation, testing methodology and issue documentation.
• Exposure to SOX, ICOFR, internal audit or IT risk standards.
• Strong Excel and documentation skills with attention to evidence completeness and workpaper quality.
• Bachelor’s degree in Information Systems, Computer Science, Accounting, Finance or a related discipline.

Ideally, you will also have

• SAP GRC, CISA, ISO 27001, Oracle security or other relevant certifications.
• Experience supporting SAP GRC Access Control implementation/testing or SAP security role review projects.
• Exposure to S/4HANA access, user provisioning workflows, SoD rule set testing or controls automation.
• Prior experience supporting MENA clients, internal audit teams or external audit engagements.

What working at EY offers

At EY, you will work on meaningful and varied client engagements while developing through coaching, practical experience and structured feedback. You will be part of an interdisciplinary environment that values quality, knowledge sharing and professional growth.

• Support, coaching and feedback from engaging colleagues.
• Opportunities to develop new SAP GRC, IT risk and audit skills.
• The freedom and flexibility to handle your role in a way that is right for you.

EY | Building a better working world

EY exists to build a better working world, helping to create long‑term value for clients, people and society and build trust in the capital markets.

Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.

Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.

EY refers to the global organization, and may refer to one or more, of the member firms of Ernst & Young Global Limited, each of which is a separate legal entity. Ernst & Young Global Limited, a UK company limited by guarantee, does not provide services to clients.