SAP GRC Functional Consultant (Senior Associate/ Manager)

EY Technology Solutions; Kuala Lumpur; On-site; MYR 120,000 - 220,000; Full time

Job summary

EY Technology Solutions is seeking an experienced SAP Governance, Risk and Compliance (GRC) Consultant to join our SAP practice in Malaysia, with locations Penang and Kuala Lumpur. The role focuses on SAP GRC Access Control implementations, enhancements, and support, delivering controls, risk analyses, and SoD definitions.

You will design and configure GRC modules (ARA, ARM, EAM, BRM), work with stakeholders, mentor juniors, and support S/4HANA transformation projects.

Qualifications

• Bachelor's degree in IT, CS, Accounting, BIS or related field.
• Senior Associate: 3–6 years SAP GRC experience; Manager: 7+ years with leadership.
• Hands-on SAP GRC Access Control implementations and support.

Responsibilities

• Lead and deliver SAP GRC Access Control projects.
• Design, configure and maintain GRC modules: ARA, ARM, EAM, BRM.
• Define SoD rules and compliance requirements with stakeholders.
• Conduct user access reviews, risk assessments, and audits.
• Support S/4HANA transformation by integrating GRC controls.
• Mentor junior consultants and assist project planning.

Skills

SAP GRC

SoD concepts

Stakeholder management

Communication

Teamwork

Risk assessment

Education

Bachelor's degree in IT / CS / Accounting / BIS

Tools

SAP GRC Access Control

SAP S/4HANA

SAP ECC

Job description

Location: Penang/ Kuala Lumpur (we are hiring for both location)

We are seeking an experienced SAP Governance, Risk and Compliance (GRC) Consultant to join our SAP practice. The successful candidate will play a key role in delivering SAP GRC solutions, with a primary focus on SAP Access Control. Experience in SAP Process Control and broader SAP security and compliance frameworks will be an added advantage.

Key Responsibilities

• Lead and deliver SAP GRC Access Control implementation, enhancement, and support projects.
• Design, configure, and maintain SAP GRC Access Control modules, including:
• Access Risk Analysis (ARA)
• Access Request Management (ARM)
• Emergency Access Management (EAM)
• Business Role Management (BRM)
• Collaborate with business and IT stakeholders to define segregation of duties (SoD) rules and compliance requirements.
• Conduct user access reviews, risk assessments, and compliance audits.
• Support SAP S/4HANA transformation projects by integrating GRC controls and governance processes.
• Analyze and resolve security and authorization issues across SAP landscapes.
• Provide recommendations on governance, risk, and compliance best practices.
• Prepare functional specifications, design documents, test scripts, and training materials.
• Mentor junior consultants and support project planning and stakeholder management activities.
• For Manager-level candidates, lead project teams, manage client relationships, and drive business development activities.

Key Requirements

• Bachelor's degree in Information Technology, Computer Science, Accounting, Business Information Systems, or a related field.
• Senior Associate: 3-6 years of relevant SAP GRC experience.
• Manager: 7+ years of relevant SAP GRC experience with project leadership responsibilities.
• Strong hands‑on experience in SAP GRC Access Control implementations and support.
• Experience in SAP S/4HANA environments and SAP security concepts.
• Good understanding of Segregation of Duties (SoD), compliance, and audit requirements.
• Experience working with SAP ECC and/or SAP S/4HANA environments.
• Strong stakeholder management and communication skills.
• Ability to work independently and in a team‑oriented consulting environment.

Preferred Qualifications

• Experience with SAP GRC Process Control.
• Exposure to SAP Security and Authorization concepts.
• Experience in regulated industries such as Banking, Financial Services, Insurance, or Public Sector.
• SAP GRC and/or SAP Security certifications.
• Experience in end-to-end SAP implementation or transformation projects.

What We're Looking For

• Strong consulting and problem‑solving mindset.
• Ability to engage business and technical stakeholders effectively.
• Passion for governance, risk, compliance, and digital transformation.
• Ability to manage multiple priorities in a fast‑paced consulting environment.