KONE - SAP GRC Analyst (4-8 yrs)

Role : SAP GRC Analyst

Job Description :

To summarize, in this role you get to :

- Design, configure, and maintain SAP GRC solutions, including SAP GRC Access Control, SAP GRC Process Control, and SAP GRC Risk Management.

- Work with business stakeholders to understand their risk and compliance requirements and translate them into technical solutions.

- Collaborate with other technical teams, such as SAP Basis, Security & functional teams, to ensure that SAP GRC solutions are integrated seamlessly into the overall SAP landscape to ensure alignment of GRC strategies with business objectives.

- Implement and maintain security controls to protect sensitive data and ensure compliance with regulatory requirements.

- Monitor and optimize the performance of SAP GRC solutions to ensure that they are running efficiently and effectively.

- Troubleshoot and resolve technical issues related to SAP GRC solutions. Stay up to date on new SAP GRC features and functionality and provide recommendations on how they can be used to improve the organization's risk and compliance posture.

Skills & experience we`re looking for :

- 4-6 years of experience in SAP Security, Authorizations & GRC AC/PC.

- Deep knowledge & Understanding of various aspects of SAP Security & Authorizations, both from a technical as well as business process perspective.

- Knowledge of SAP authorization concept for both on-premise systems such as ECC, BW, Portal, BPC, FIORI as well as S/4 HANA and new SAP Cloud solutions.

- Experience with integration to Identity Management Systems for provisioning to SAP on-premises and Cloud applications, with Directory Services for Authentication via SSO.

- Experience with SAP GRC Access Control for centralized risk management, compliant provisioning and role administration.

- Experience in handling Segregation of Duties (SOD) Risks, applying mitigation controls, supervising sensitive access and elevated privileges.

- Ability to perform GRC/SOD control maintenance and remediation processes. Make recommendations for application security including change, incident management, process enhancements, access management, and change management.

- Good knowledge of Fiori, HANA, BW, BPC, S/4 HANA and Cyber Security.

- Configure and manage user access controls, role management, and segregation of duties (SoD) analysis.

- Conduct audits & facilitate external Audits of access controls to ensure compliance with internal policies and regulations.

- Design and implement control frameworks to ensure business processes comply with regulatory standards.

- Monitor and report on the effectiveness of internal controls.

- Propose enhancements and optimizations for existing SAP Security & GRC processes to stay updated with

the latest SAP Security, GRC trends, tools, and SAP releases to enhance system capabilities.