SAP GRC Consultant - SC Cleared - Dutch

Yolk Recruitment Ltd; Amsterdam; Hybrid; EUR 90,000 - 120,000; Full time

Job summary

Yolk Recruitment Ltd. seeks a Senior Specialist SAP GRC to strengthen governance, risk, compliance, and access management across SAP landscapes, including cloud and hybrid deployments.

You will design, implement, maintain, and optimise SAP GRC and identity management solutions, collaborate with security teams, auditors, and business owners, and support internal and external audits while driving continuous improvement.

Qualifications

• 5+ years in IT governance, risk, compliance, internal audit, or related fields.
• Hands-on SAP authorisations, roles, profiles, and security concepts.
• Experience with SAP GRC modules and SoD remediation.
• Knowledge of SAP cloud IAM technologies and SAP BTP.
• Familiar with SAP IDM/IAG/IPS/IAS concepts and tools.
• Fluent in Dutch and English, both written and spoken.

Responsibilities

• Manage and enhance SAP GRC, access management, risk monitoring, and control frameworks.
• Oversee IT operations governance and GITC within the SAP landscape.
• Identify, assess, and mitigate business and IT process risks.
• Design, implement, configure, and maintain SAP access management and identity governance.
• Advise stakeholders on risk, compliance, and access management matters.
• Evaluate controls, propose improvements, and drive remediation activities.
• Support audits with subject matter expertise and evidence of SAP controls.
• Lead discussions on architecture, integration, and security across SAP platforms.
• Contribute to ongoing development of the GRC function and processes.
• Participate in governance, compliance, and risk projects across business and IT.

Skills

SAP GRC

SoD analysis

Identity governance

SAP IDM

IAG concepts

SAP CIS

SailPoint IdentityIQ

Education

University degree or equivalent

Tools

SailPoint IdentityIQ

SAP Central User Administration (CUA)

SAP Identity Management (SAP IDM)

SAP Cloud Identity Access Governance (IAG)

SAP Identity Provisioning Service (IPS)

SAP Identity Authentication Service (IAS)

SAP Cloud Identity Services (CIS)

Job description

Senior Specialist SAP GRC

Role Overview

We are seeking an experienced Senior Specialist SAP GRC to support and enhance governance, risk, compliance, and access management processes across a complex SAP landscape. This role focuses on General IT Controls (GITC), business process risk management, segregation of duties (SoD), and identity and access governance within both cloud and hybrid SAP environments.

The successful candidate will play a key role in designing, implementing, maintaining, and optimising SAP GRC and identity management solutions while ensuring compliance with regulatory, security, and audit requirements. This is a hands-on position requiring deep practical experience with SAP cloud IAM technologies rather than purely conceptual knowledge.

Key Responsibilities

• Manage and enhance SAP Governance, Risk & Compliance processes, including access management, risk monitoring, and control frameworks.
• Oversee governance around IT operations processes and General IT Controls (GITC) within the SAP landscape.
• Support the identification, assessment, and mitigation of business and IT process risks.
• Design, implement, configure, and maintain SAP access management and identity governance solutions.
• Act as a trusted advisor to business stakeholders, process owners, security teams, and system owners on risk, compliance, and access management matters.
• Evaluate the effectiveness of controls, recommend improvements, and drive remediation activities.
• Support internal and external audits by providing subject matter expertise and evidence relating to SAP controls and compliance processes.
• Lead discussions regarding application design, integration requirements, and security considerations across SAP platforms.
• Contribute to the ongoing development and professionalisation of the GRC function and related processes.
• Participate in governance, compliance, and risk management projects across both business and IT domains.

Technical Requirements

Candidates must demonstrate strong hands-on experience with SAP user access management and identity governance solutions within SAP cloud environments, including:

• SAP Cloud Identity Services (CIS)
• SAP Identity Authentication Service (IAS)
• SAP Identity Provisioning Service (IPS)
• SAP Cloud Identity Access Governance (IAG)
• SAP Business Technology Platform (BTP)

The role requires the ability to:

• Design access management architectures for SAP cloud and hybrid landscapes.
• Advise on appropriate use cases, limitations, and integration capabilities of SAP IAM technologies.
• Configure and administer SAP cloud identity solutions.
• Integrate SAP identity and access management tools with existing enterprise security platforms.

Required Skills & Experience

• Minimum 5 years of experience within IT Governance, Risk Management, Compliance, Internal Audit, or related disciplines.
• Strong practical experience working with SAP environments, including SAP authorisations, roles, profiles, and security concepts.
• Experience managing risks and controls across business and IT processes within SAP landscapes.
• Proven knowledge of SAP authorisation concepts in both on-premise and cloud environments.
• Hands-on experience with SAPGRC solutions, including:
  • SAP GRC Access Control
  • SAP GRC Process Control
  • Segregation of Duties (SoD) analysis and remediation
  • User access reviews and risk assessments
• Experience with one or more of the following technologies:
  • SAP Central User Administration (CUA)
  • SAP Identity Management (SAP IDM)
  • SAP Cloud Identity Access Governance (IAG)
  • SAP Identity Provisioning Service (IPS)SAP Identity Authentication Service (IAS)
• Experience with SailPoint IdentityIQ is advantageous.
• Strong understanding of security, compliance, and governance requirements within enterprise SAP environments.

Personal Profile

• Excellent analytical and problem-solving skills.
• Able to balance risk, compliance, operational requirements, and business objectives.
• Strong stakeholder management and communication skills.
• Comfortable working with technical teams, auditors, security specialists, and business process owners.
• Proactive, pragmatic, and solution-oriented approach.
• Ability to maintain a broad perspective while managing detailed compliance and access management requirements.

Qualifications

• University degree or equivalent level of education and professional capability.
• Fluent in Dutch and English, both written and spoken.

Location

• Utrecht, Netherlands
• Hybrid working model with occasional travel to other locations as required