SAP GRC Consultant - SC Cleared - Dutch

Conexus; Amsterdam; Hybrid; EUR 90,000 - 130,000; Full time

Job summary

Conexus is seeking an experienced Senior Specialist SAP GRC to support governance, risk, and compliance across a complex SAP landscape. The role focuses on GITC, SoD, and identity governance in cloud and hybrid SAP environments.

You will design, implement, and optimize SAP GRC and IAM solutions, ensuring regulatory and audit readiness with a hands-on approach in SAP cloud IAM technologies.

Qualifications

• Minimum 5 years in IT governance, risk, compliance or internal audit.
• Hands-on SAP GRC, IAM and SoD in cloud/hybrid environments.
• Strong knowledge of SAP authorizations, roles and security concepts.
• Experience with SAP GRC modules: Access Control and Process Control.
• Proven ability to coordinate with auditors and business stakeholders.

Responsibilities

• Manage SAP GRC processes, including access management, risk monitoring, and control frameworks.
• Oversee GITC governance within SAP landscapes and IT operations.
• Assess and mitigate business and IT process risks.
• Design, implement and maintain SAP IAM and identity governance solutions.
• Advise stakeholders on risk, compliance, and access controls.

Skills

GRC governance

SoD analysis

Stakeholder management

Analytical thinking

Communication

Education

University degree in IT/Security

Tools

SAP GRC Access Control

SAP GRC Process Control

SAP Cloud IAG

SAP IPS

SAP IAS

SAP BTP

SailPoint IdentityIQ

Job description

We are seeking an experienced Senior Specialist SAP GRC to support and enhance governance, risk, compliance, and access management processes across a complex SAP landscape. This role focuses on General IT Controls (GITC), business process risk management, segregation of duties (SoD), and identity and access governance within both cloud and hybrid SAP environments.

The successful candidate will play a key role in designing, implementing, maintaining, and optimising SAP GRC and identity management solutions while ensuring compliance with regulatory, security, and audit requirements. This is a hands‑on position requiring deep practical experience with SAP cloud IAM technologies rather than purely conceptual knowledge.

Key Responsibilities

• Manage and enhance SAP Governance, Risk & Compliance processes, including access management, risk monitoring, and control frameworks.
• Oversee governance around IT operations processes and General IT Controls (GITC) within the SAP landscape.
• Support the identification, assessment, and mitigation of business and IT process risks.
• Design, implement, configure, and maintain SAP access management and identity governance solutions.
• Act as a trusted advisor to business stakeholders, process owners, security teams, and system owners on risk, compliance, and access management matters.
• Evaluate the effectiveness of controls, recommend improvements, and drive remediation activities.
• Support internal and external audits by providing subject matter expertise and evidence relating to SAP controls and compliance processes.
• Lead discussions regarding application design, integration requirements, and security considerations across SAP platforms.
• Contribute to the ongoing development and professionalisation of the GRC function and related processes.
• Participate in governance, compliance, and risk management projects across both business and IT domains.

Technical Requirements

Candidates must demonstrate strong hands‑on experience with SAP user access management and identity governance solutions within SAP cloud environments, including:

• SAP Cloud Identity Services (CIS)
• SAP Identity Authentication Service (IAS)
• SAP Identity Provisioning Service (IPS)
• SAP Cloud Identity Access Governance (IAG)
• SAP Business Technology Platform (BTP)

The role requires the ability to:

• Design access management architectures for SAP cloud and hybrid landscapes.
• Advise on appropriate use cases, limitations, and integration capabilities of SAP IAM technologies.
• Configure and administer SAP cloud identity solutions.
• Integrate SAP identity and access management tools with existing enterprise security platforms.

Required Skills & Experience

• Minimum 5 years of experience within IT Governance, Risk Management, Compliance, Internal Audit, or related disciplines.
• Strong practical experience working with SAP environments, including SAP authorisations, roles, profiles, and security concepts.
• Experience managing risks and controls across business and IT processes within SAP landscapes.
• Proven knowledge of SAP authorisation concepts in both on-premise and cloud environments.
• Hands‑on experience with SAPGRC solutions, including:
  • SAP GRC Access Control
  • SAP GRC Process Control
  • Segregation of Duties (SoD) analysis and remediation
  • User access reviews and risk assessments
• Experience with one or more of the following technologies:
  • SAP Central User Administration (CUA)
  • SAP Identity Management (SAP IDM)
  • SAP Cloud Identity Access Governance (IAG)
  • SAP Identity Provisioning Service (IPS)
  • SAP Identity Authentication Service (IAS)
• Experience with SailPoint IdentityIQ is advantageous.
• Strong understanding of security, compliance, and governance requirements within enterprise SAP environments.

Personal Profile

• Excellent analytical and problem‑solving skills.
• Able to balance risk, compliance, operational requirements, and business objectives.
• Strong stakeholder management and communication skills.
• Comfortable working with technical teams, auditors, security specialists, and business process owners.
• Proactive, pragmatic, and solution‑oriented approach.
• Ability to maintain a broad perspective while managing detailed compliance and access management requirements.

Qualifications

• University degree or equivalent level of education and professional capability.
• Fluent in Dutch and English, both written and spoken.

Location

• Utrecht, Netherlands
• Hybrid working model with occasional travel to other locations as required