Senior SAP GRC Specialist

Swift; Kuala Lumpur; Hybrid; MYR 180,000 - 300,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

Swift is seeking an experienced SAP GRC specialist to join the Enterprise Service Group in a role focused on security, governance, and SAP authorization management. You will work across SAP and non-SAP ecosystems, coordinating with auditors and delivery teams to secure enterprise services.

The ideal candidate has 4–5 years in a similar role, a CS-related degree, and hands-on SAP GRC experience. The environment is Agile, with a strong emphasis on collaboration and secure operations.

Qualifications

• Bachelor degree in Computer Science or related disciplines or equivalent work experience.
• Strong knowledge of SAP GRC and security concepts.
• Experience with governance, risk and compliance frameworks.

Responsibilities

• Be part of SAP specialists managing the enterprise services from the SWIFT.
• Maintain and administer SAP Security environment, including SAP Security Roles and access controls.
• Collaborate with security staff and cross-functional teams to implement governance, risk, and compliance measures.
• Prepare internal and external audit evidence and support audits.

Skills

SAP GRC

SAP Security

GRC concepts

SAP authorizations

Information security

IT risk assessment

Cross-system risk analysis

Security auditing

Education

Bachelor's degree in Computer Science or related disciplines

Tools

GRC tools

Job description

About Us

We’re the world’s leading provider of secure financial messaging services, headquartered in Belgium. We are the way the world moves value – across borders, through cities and overseas. No other organisation can address the scale, precision, pace and trust that this demands, and we’re proud to support the global economy.

About Us

We’re the world’s leading provider of secure financial messaging services, headquartered in Belgium. We are the way the world moves value – across borders, through cities and overseas. No other organisation can address the scale, precision, pace and trust that this demands, and we’re proud to support the global economy.

We’re unique too. We were established to find a better way for the global financial community to move value – a reliable, safe and secure approach that the community can trust, completely. We’re always striving to be better and are constantly evolving in an ever-changing landscape, without undermining that trust. Five decades on, our vibrant community reflects the complexity and diversity of the financial ecosystem. We innovate diligently, test exhaustively, then implement fast. In a connected and exciting era, our mission has never been more relevant. Swift now has a presence in 200+ countries and legal territories to serve a community of more than 12,000 banks and financial institutions.

The squad is looking for a SAP GRC specialist who will be involve in security, operations and deployment using a wide range of technologies to drive true value to our customers, acting as the CoE for the enterprise applications, solutions and products scope.

What Swift offers:

Our employees are the foundation of our success. Swift has a unique corporate mindset, where diversity, personal development, including online and professional courses, hands-on training, internal mobility and networking are actively encouraged. We think you'll like our office culture, which is built around the way we work to achieve a healthier work/life balance, with for example the hybrid way of working, allowing you to work from home several days a week. Our collaborative approach is reflected in our culture. We have a true team and community-led approach to commercial growth. We believe that our employees are our greatest asset and investment into their careers, not just our client relationships, benefit from long-term development. The Swift DNA is made up of people who are excited about being at the heart of industry change, delivering high quality services with trust and integrity.

Our dynamic, multi-cultural institution is comprised of over 3300 employees of 100 nationalities, in 26 offices worldwide.

About the Enterprise Service group:

By joining the Enterprise Service Group you will create, manage and secure an infrastructure in an Agile way, build an ecosystem around the SWIFT services, and innovate with clients, as part of an Agile tribe or team.

Our mission:

Offer a secure and resilient Infrastructure

to support Enterprise services.

Design, implement and operate a secure infrastructure under SAP and non-SAP ecosystems.

What To Expect

• Senior in SAP authorizations and GRC.
• You need to be curious to develop your skill in security.
• You will be working on new technologies around security in SAP (S4/Hana, SAP Rise, GRC, Access control, Risk management, supervisory control, Fiori)
• You will work together with auditors and delivery teams to provide robust and secure solutions from an infrastructure and user management perspective.
• You should be able to work individually but team work is very important.

Key Responsibilities

• Be part of a team of SAP specialists managing the enterprise services from the SWIFT
• Maintain and administer the SAP Security environment, including the development, implementation, and management of SAP Security Roles, to establish secure and compliant business processes, utilizing security administration tools in key SAP programs; work with internal team to maintain a secure, compliant environment; remain aware of available security tools.
• Responsible for understanding, translating and communicating governance, risk, and compliance concepts, requirements and practices to stakeholders.
• Assist in the development, implementation and maintenance of programs, processes, and procedures used to support governance, risk, and compliance efforts
• Collaborate with security staff, cross-functional teams and business owners to ensure appropriate role, authorization and access controls are in place that support security governance
• Utilize GRC tools to manage list of external authoritative sources, information technology controls, corporate policies and procedures.
• Perform cyber risk and vulnerability assessment to proactively secure the organization.
• Perform IT Security Reviews
• Collaborate with various business units to understand, resolve or mitigate constraints impacting their operations and their risks associated with GRC controls
• Prepare internal and external audit evidence

What will make you successful?

• At least 4 or-5 years of professional experience in similar role
• A university or bachelor degree in Computer Science or related disciplines/equivalent work experience
• An understanding of the following topics with hands on experience:
  • Security role development and/or maintenance
  • Firefighter configuration and maintenance
  • GRC request administration
  • Cross-System risk analysis configuration
  • SAP GRC (12 or higher)
  • Mitigating organizational risks (analysing, interpreting, and recommendations)
  • SAP authorization concepts
  • Segregation of Duties (SOD) with an understanding of business processes and applicable mitigating controls
  • Information security baselining and risk frameworks/standards
  • Periodic sap security reviews/audits
• Excellent communication skills, knowledge of IT controls, business processes within a financial environment.
• Working within an Agile environment is an asset

What We Offer

We give you the freedom to be yourself. We are creating an environment of unique individuals – like you – with different perspectives on the financial industry and the world. A diverse and inclusive environment in which everyone’s voice counts and where you can reach your full potential.

We are committed to an inclusive and accessible recruitment process. If you require a reasonable accommodation related to accessibility during your application or interview, please contact [e-mail] or indicate this in your application.

Please note that this mailbox is not monitored for general recruitment enquiries and should only be used for accessibility or accommodation-related requests (for example related to vision, hearing or neurodiversity).

All requests are confidential and will not affect your candidacy.