GDS Consulting_SAP GRC Manager

Ernst & Young Advisory Services Sdn Bhd; Taguig; On-site; PHP 1,800,000 - 3,000,000; Full time

Job summary

EY - GDS Consulting – Tech Ops is seeking a seasoned SAP Security and GRC Manager to lead AMS engagements, drive operational excellence, and ensure compliant, scalable support across SAP environments. You will collaborate with stakeholders and technical teams to deliver secure operations and continuous process improvements.

The role emphasizes service delivery leadership, incident and access management, and governance across SAP GRC processes with opportunities to shape AMS growth globally.

Qualifications

• CA/MBA/MSc/BTech with 7–8 years of consulting/auditing experience.
• End-to-end implementation experience with at least one S/4HANA transformation project.
• Deep SAP security design and configuration across multiple applications (ECC, BW, SRM, Portal, S/4HANA, Fiori, BTP, BPC, SuccessFactors).
• Experience managing incident, service requests, problem, change and escalation processes.
• Strong ITSM knowledge and service delivery best practices.
• Proven experience in SLA management, KPI reporting and governance with stakeholders.
• Understanding of SAP security processes, architecture, controls and SOD concepts in an SAP ERP environment.
• Experience with GRC access controls deployment (ARM, BRM, ARA, EAM, UAR) and RBAC reviews.

Responsibilities

• Lead SAP Security and GRC AMS engagements ensuring stable, efficient delivery.
• Manage day-to-day operations: incidents, service requests, problem management and access provisioning.
• Ensure adherence to SLAs, KPIs, and drive continuous improvements.
• Escalation point for complex SAP Security and GRC issues with cross-functional teams.
• Oversee SAP user and role administration, access management and reviews.
• Drive root cause analyses to reduce recurring incidents and improve stability.
• Lead governance meetings, reviews and stakeholder updates on health and risks.
• Monitor queues and workloads to ensure timely resolution.
• Establish and maintain processes, procedures, knowledge bases and documentation.
• Ensure compliance with internal security policies, audit requirements and client controls.
• Manage ARM/BRM/ARA/EAM/UAR in SAP GRC Access Control.
• Identify automation opportunities across SAP Security and GRC processes.
• Support transition activities for new AMS engagements and knowledge transfer.
• Collaborate with implementation teams for smooth handover to AMS.
• Lead client communication, manage escalations and client expectations.
• Coach and mentor team members; develop technical capability.
• Oversee resource planning, allocation and performance.
• Support business development, AMS proposals and growth initiatives.
• Decision-making, process optimization and governance of service delivery.
• Staffing, task assignments and ensuring the team has tools and support.

Skills

SAP Security

SAP GRC

AMS delivery

Stakeholder management

ITSM

Service governance

Leadership

Automation opportunities

Education

CA/MBA/MSc/BTech degree

Tools

SAP GRC

S/4HANA

ECC

BW

SRM

Fiori

Job description

EY - GDS Consulting – Tech Ops – SAP Security and GRC Manager

As part of our EY-GDS Tech Ops team, you will lead Application Management Services (AMS) engagements focused on SAP Security and Governance, Risk, and Compliance (GRC). You will be responsible for managing service delivery, driving operational excellence, ensuring compliance with client SLAs, and overseeing support activities across SAP Security and GRC landscapes. In addition, you will collaborate with business stakeholders, client teams, and technical teams to deliver secure, efficient, and scalable operational support services while continuously improving processes and service quality.

The opportunity

We're looking for people with expertise in SAP Security, SAP GRC, and AMS service delivery to join our EY-GDS GRC Technology Tech Ops Team . This is a fantastic opportunity to be part of a leading firm whilst being instrumental in the growth of the service offering.

Your Key Responsibilities

• Lead SAP Security and GRC AMS engagements, ensuring stable and efficient service delivery across supported environments.
• Manage day-to-day operations, including incident management, service requests, problem management, access provisioning, role administration, and compliance activities.
• Ensure adherence to client SLAs, KPIs, and operational metrics while driving continuous improvements in service performance.
• Act as the primary escalation point for complex SAP Security and GRC issues and coordinate resolution with functional, technical, BASIS, and infrastructure teams.
• Oversee SAP user administration, role administration, access management, emergency access management, and periodic access review activities.
• Drive root cause analysis and problem management initiatives to reduce recurring incidents and improve service stability.
• Lead service governance meetings, operational reviews, and stakeholder discussions to provide updates on service health, risks, and improvement plans.
• Monitor ticket queues and team workloads to ensure timely resolution of incidents, requests, and compliance-related activities.
• Establish and maintain operational processes, support procedures, knowledge repositories, and service documentation.
• Ensure compliance with internal security policies, audit requirements, regulatory standards, and client-specific controls.
• Manage SAP GRC Access Control processes, including Access Request Management (ARM), Business Role Management (BRM), Access Risk Analysis (ARA), Emergency Access Management (EAM), and User Access Review (UAR).
• Identify opportunities for automation and operational efficiency across SAP Security and GRC support processes.
• Support transition activities for new AMS engagements, including knowledge transfer, process documentation, and support readiness assessments.
• Collaborate with implementation teams to ensure smooth handover of projects into AMS support.
• Lead client communication, handle escalations, manage expectations, and maintain strong customer relationships.
• Train, coach, and mentor team members while driving technical capability development and operational excellence.
• Manage resource planning, workload allocation, utilization, and team performance to ensure service commitments are achieved.
• Support business development activities, AMS proposals, solution reviews, and managed services growth initiatives.
• Responsible for decision-making, process optimization, resource management, and overall service delivery governance.
• Accountable for staffing, task assignment, performance management, talent development, and ensuring the team has the tools and support required to achieve operational objectives.

Skills and Attributes for Success

• Strong communication, stakeholder management, presentation, and team leadership skills.
• Experience managing AMS delivery teams supporting global SAP Security and GRC environments.
• Strong customer-service mindset with a focus on operational excellence and continuous improvement.
• Ability to manage multiple priorities, deliver under pressure, and handle critical escalations effectively.
• Foster teamwork, quality culture, and accountability while coaching and mentoring junior team members.
• Promote a continuous learning culture and support technical upskilling across the team.
• Strong analytical and problem-solving skills with an ability to translate operational challenges into sustainable solutions.

To qualify for the role, you must have

• CA/MBA/M.Sc./B.Tech with a minimum of 7 - 8 years of consulting / auditing experience
• Experience in end-to-end implementation projects with at least one full cycle S4 HANA transformation project
• Rich experience in SAP security design and configuration for multiple applications like ECC, BW, SRM, Portal, S4HANA, Fiori, BTP, BPC and Success Factors
• Experience managing incident, service request, problem, change, and escalation management processes.
• Strong understanding of IT Service Management (ITSM) frameworks and service delivery best practices.
• Proven experience in SLA management, KPI reporting, service governance, and stakeholder management.
• Understanding of business processes, controls frameworks, compliances and regulations, and segregation of duty concepts in an SAP ERP environment
• Understanding of SAP security processes, security architecture and administration
• End to end implementation experience of SAP GRC access controls (access request management, business role management, emergency access management, access risk analysis, user access review and SOD review) and deployments
• Good understanding of functional processes to drive ruleset and controls framework design within GRC access control
• Good exposure to benchmarking and remediation activities for GRC rulesets
• Stronghold on the basic SAP landscape, transports system and version compatibility concepts

What we look for

• A Team of people with commercial acumen, technical experience and enthusiasm to learn new things in this fast-moving environment with consulting skills.
• An opportunity to be a part of market-leading, multi-disciplinary team of 1400 + professionals, in the only integrated global transaction business worldwide.
• Opportunities to work with EY Consulting practices globally with leading businesses across a range of industries

What working at EY offers

At EY, we’re dedicated to helping our clients, from start–ups to Fortune 500 companies — and the work we do with them is as varied as they are.

You get to work with inspiring and meaningful projects. Our focus is education and coaching alongside practical experience to ensure your personal development. We value our employees and you will be able to control your own development with an individual progression plan. You will quickly grow into a responsible role with challenging and stimulating assignments. Moreover, you will be part of an interdisciplinary environment that emphasizes high quality and knowledge exchange. Plus, we offer:

• Support, coaching and feedback from some of the most engaging colleagues around
• Opportunities to develop new skills and progress your career
• The freedom and flexibility to handle your role in a way that’s right for you

EY refers to the global organization, and may refer to one or more, of the member firms of Ernst & Young Global Limited, each of which is a separate legal entity. Ernst & Young Global Limited, a UK company limited by guarantee, does not provide services to clients.