SOD Lead

Abhidi Solution; Kuala Lumpur; On-site; MYR 100,000 - 167,000; Full time

Job summary

Abhidi Solution is seeking a SOD/GRC Specialist to drive analysis and resolution of separation of duties conflicts across SAP and non-SAP environments. The role emphasizes maintaining SOD rulesets, collaborating with security and GRC teams, and ensuring SOX ITGC compliance.

You will coordinate with auditors and internal teams, implement preventive and detective controls, and train stakeholders on SOD policies and best practices within a dynamic, security-focused environment.

Qualifications

• Experience in working on projects related to IAM, Application Security, Data Security or GRC.
• Strong knowledge of SOD principles, GRC tools, and access control frameworks.
• Experience with ERP systems and user provisioning.
• Familiarity with compliance standards such as SOX and ITGC.
• Strong analytical, communication, and stakeholder management skills.
• Experience in requirement gathering and design/implement SOD rulesets for GRC or IAM environments.
• Knowledge of SAP GRC and SAP security would be preferable (SAP MM, FICO, SD, PP and HR modules).
• Experience ensuring application security standards are integrated by including SOD testing in the security process.
• AVM knowledge and related lookback activities.

Responsibilities

• Lead analysis and resolution of SOD conflicts across systems.
• Maintain and update SOD rulesets and access control frameworks.
• Collaborate with internal teams to ensure SOX and regulatory compliance.
• Coordinate with auditors during audits and provide documentation.
• Work with security, GRC and application teams to implement preventive and detective controls.
• Train stakeholders on SOD policies and best practices.

Skills

SOD principles

GRC tools

access control frameworks

ERP systems

SOX/ITGC knowledge

Analytical skills

Communication

SOD rulesets design

Stakeholder management

AVM knowledge

Tools

SAP GRC

Saviynt

SAP security

Fiori

AVM

Job description

Experience in working in projects related to one of the core domains: IAM, Application Security, Data Security or GRC

Strong knowledge of SOD principles, GRC tools (e.g., SAP GRC, Saviynt), and access control frameworks.

Experience with ERP systems and user provisioning.

Familiarity with compliance standards (e.g., SOX, ITGC).

Strong analytical, communication, and stakeholder management skills.

Experience in requirement gathering/design/implement SOD rulesets to GRC or IAM related environment. Familiar with various SOD rulesets - Fiori, Cross System etc.

SAP security knowledge or experience would be preferable {Basic SAP Modules like MM, FICO, SD, PP and HR}

Experience in ensuring application security standards are well integrated into systems by incorporating SOD testing into the security process

AVM knowledge

Manual SoD AVM Lookback activities/exposure

Lead the analysis and resolution of SOD conflicts across systems.

Maintain and update SOD rulesets and access control frameworks.

Collaborate with internal teams to ensure compliance with SOX and other regulatory standards.

Work with internal/external auditors during audits and provide necessary documentation.

Coordinate with security, GRC, and application teams to implement preventive and detective controls.

Train and guide stakeholders on SOD policies and best practices.