SAP GRC & Controls Lead

Job Description:

The SAP GRC & Identity Security Contractor will provide backfill support for the implementation of SAP S/4HANA Embedded Governance, Risk, and Controls (GRC), integration with the corporate Identity and Access Management (IAM) platform, and alignment with SOX and audit control requirements for financial applications. The role supports access governance design, identity integration, segregation of duties (SOD), testing, and compliance readiness across SAP S/4HANA, SAP BTP/BDC, and select SaaS environments.

Key Responsibilities

SAP Embedded GRC & Access Control

• Assess current-state SAP GRC Access Control (AC) and confirm future-state requirements for embedded GRC in S/4HANA.
• Support migration from standalone SAP GRC to S/4HANA Embedded GRC.
• Design and configure up to six (6) standard SAP GRC AC workflows, including:
• User provisioning
• Emergency (Firefighter) access approval
• Role approval
• User access reviews and certifications

Identity Governance & IAM Integration

• Design and configure the SAP Identity Access Governance (IAG) bridge to integrate with SAP GRC for:
• User provisioning
• SOD risk analysis
• SAP BTP and BDC coverage
• Design and configure integration between corporate IAM and SAP GRC to support automated SAP user provisioning and access lifecycle management.
• Ensure identity integrations are secure, auditable, and compliant.

Segregation of Duties & Ruleset Management

• Update and maintain SAP GRC SOD and critical access rulesets, including:
• S/4HANA transaction codes
• Fiori applications
• Custom SAP transactions
• Update SAP IAG SOD rulesets for BTP, BDC, and cross-system / SaaS applications integrated with S/4HANA.

Testing & Deployment Support

• Develop test scenarios and scripts for SAP GRC, SAP IAG, and IAM integrations.
• Perform unit testing and support defect resolution.
• Coordinate and support User Acceptance Testing (UAT).
• Assist with deployment readiness and post golive access governance support.

SOX & Audit Alignment

• Apply working knowledge of SOX and data controls relevant to SAP financial applications.
• Support alignment of SAP GRC access controls with audit and SOX expectations.
• Assist audit and SOX teams with control walkthroughs, evidence support, and access governance design explanations.

Required Experience

• Hands-on experience with SAP S/4HANA Security and SAP GRC Access Control and SAP IAG
• Experience with SAP GRC workflows, Firefighter access, and SOD analysis
• Experience integrating SAP with corporate IAM solutions like Oracle Identity Manager or SailPoint
• Understanding of SAP security roles, transactions, and Fiori authorizations
• Familiarity with SOX and audit compliance in SAP financial systems