SAP GRC Consultant

Ampstek; Indianapolis (IN); On-site; USD 120,000 - 160,000; Full time

Job summary

Ampstek in Indianapolis, IN, seeks an experienced SAP GRC upgrade specialist to lead an end-to-end upgrade of Access Control and Process Control within a large SAP landscape.

You will coordinate with SAP Basis, assess upgrade impacts, refine Process Control rules, and ensure post-upgrade readiness with comprehensive documentation and rollback plans. This onsite role requires 10+ years of SAP GRC experience and collaboration with audit teams.

Qualifications

• Total Years of Experience: 10+ years
• Relevant Years of Experience: 8+ years
• Mandatory Skills: SAP GRC (Access Controls & Process Controls) ability to work in large SAP landscape

Responsibilities

• Lead end-to-end planning and execution of the SAP GRC upgrade (Access Control / Process Control), including sizing, pre-upgrade checks, and post-upgrade validation
• Coordinate with SAP Basis team on system landscape readiness, patching, and downtime planning
• Perform upgrade impact assessments on existing configurations, custom rules, workflows, and integrations
• Validate that all existing Access Control (ARA, ARM, EAM) and Process Control functionality operates correctly post-upgrade
• Own defect triage and resolution for upgrade-related issues, working with SAP OSS/vendor support as needed
• Prepare upgrade documentation, rollback plans, and go-live readiness checklists
• Review, analyze, and refine existing Process Control business rules to improve accuracy, reduce false positives, and align with current business processes
• Partner with Business Process Owners and Internal Audit to identify gaps or outdated rule logic
• Design, build, and test new or modified business rules, including data sources, rule scripts, and automated monitoring logic
• Optimize control objectives, control frameworks, and control-to-rule mapping for continuous monitoring
• Conduct periodic rule performance reviews and recommend tuning based on exception trends and audit feedback
• Support rule versioning, change management, and documentation of rule logic for audit traceability

Skills

SAP GRC (Access Controls & Process 2)

Job description

Domain: SAP GRC (Access Controls & Process Controls)

Total Years of Experience: 10+ years

Relevant Years of Experience: 8+ years

Mandatory Skills: SAP GRC (Access Controls & Process Controls) ability to work in large SAP landscape

Detailed Job Description:

SAP GRC Upgrade (Onsite)

• Lead end-to-end planning and execution of the SAP GRC upgrade (Access Control / Process Control), including sizing, pre-upgrade checks, and post-upgrade validation
• Coordinate with SAP Basis team on system landscape readiness, patching, and downtime planning
• Perform upgrade impact assessments on existing configurations, custom rules, workflows, and integrations
• Validate that all existing Access Control (ARA, ARM, EAM) and Process Control functionality operates correctly post-upgrade
• Own defect triage and resolution for upgrade-related issues, working with SAP OSS/vendor support as needed
• Prepare upgrade documentation, rollback plans, and go-live readiness checklists

Process Control – Business Rule Refinement

• Review, analyze, and refine existing Process Control business rules to improve accuracy, reduce false positives, and align with current business processes
• Partner with Business Process Owners and Internal Audit to identify gaps or outdated rule logic.
• Design, build, and test new or modified business rules, including data sources, rule scripts, and automated monitoring logic
• Optimize control objectives, control frameworks, and control-to-rule mapping for continuous monitoring
• Conduct periodic rule performance reviews and recommend tuning based on exception trends and audit feedback
• Support rule versioning, change management, and documentation of rule logic for audit traceability