We are looking for an SAP GRC (Governance, Risk, and Compliance) Consultant to design, implement, and support SAP GRC solutions, focused on access controls, risk management, and regulatory compliance across SAP landscapes.

Implement and configure SAP GRC modules — Access Control (ARM, ARA, EAM, BRM), Process Control, and/or Risk Management Design and maintain Segregation of Duties (SoD) rule sets and risk matrices Configure and manage user access provisioning, role-based access control (RBAC), and workflow approvals Conduct SoD risk analysis and remediation for SAP ECC/S4HANA and other integrated systems Support periodic User Access Reviews (UAR) and compliance certification cycles Collaborate with internal audit, IT security, and business teams to define access risk policies Troubleshoot and resolve GRC-related incidents and support tickets Prepare documentation: functional specs, test scripts, configuration guides Support system upgrades, patches, and GRC module enhancements Ensure compliance with regulatory frameworks (SOX, GDPR, ISO 27001, etc.) Conduct training/knowledge transfer sessions for end users and audit teams

3–7 years of experience in SAP GRC implementation and support (Access Control preferred) Strong knowledge of SAP GRC 10.x/12.0 – ARA, ARM, EAM, BRM modules Experience with SoD rule book design and risk analysis Understanding of SAP Basis, SAP Security (roles/authorizations), and S4HANA landscape (a plus) Experience integrating GRC with SAP ECC/S4HANA and non-SAP systems Knowledge of compliance frameworks (SOX, internal audit processes) SAP GRC certification preferred (not always mandatory) Bachelor's degree in Computer Science, IT, Finance, or related field