Business Process Architect SAP GRC Access Control Process ControlA business process architect in the field of GRC Access Control Process Control serves as a crucial bridge between Business and IT, driving the organization toward effective governance, risk, and compliance
You will focus on Segregation of Duties (SoD) and User Access Management with deep knowledge of SAP Access Control and Process Control, you will guide the harmonization of SoD, User Authorization, and Control Automation processes across business sectors, leveraging the latest platforms within an international and compliant environment
Your primary responsibilities will include:Process Migration and Harmonization: Lead the migration of sector-specific ERPs to a unified platform, harmonizing the underlying ruleset and processes, while ensuring compliance with governance standards
Risk and Compliance Oversight: Ensure that the SoD and User Access frameworks remain conflict-free as business functions transition to a shared service model
This includes revising documentary guidelines, defining business roles, and overseeing change management
Process Control and Automation: Implement and manage SAP GRC Process Control to enhance compliance through automation and monitoring of internal controls
You will facilitate the transition from manual to automated controls, focusing on critical control points such as IT General Controls (ITGCs), three-way matching, and Critical Profile Checks
Internal Controls and Audit Readiness: Design and maintain the control framework for business processes, ensuring alignment with regulatory requirements and readiness for internal and external audits
You will collaborate with internal control owners, auditors, and compliance teams to ensure that control execution is both efficient and auditable
Collaboration and Stakeholder Engagement: Partner closely with financial governance teams, process owners, and authorization experts to align business needs with GRC controls
You will also engage external auditors and third-party partners for ongoing compliance reviews
Change Management and Business Role Design: Facilitate change management activities by supporting the design and implementation of business roles and authorization structures, ensuring compliance with SoD and Process Control requirements
Who You Are:Business Process Knowledge: Strong understanding of core business processes (eg
, Finance, Procurement, Order-to-Cash, Record-to-Report) and how they align with Access Controls (mandatory)Technical Knowledge: Strong ability to work closely with technical teams to ensure business requirements are translated into technical specifications
Capable of understanding technical configurations and effectively communicating them in business terms
(mandatory)Expertise in SAP GRC Access Control Process Control: Expert knowledge of Access Risk Analysis (ARA), Access Request Management (ARM), Emergency Access Management (EAM), and Process Control
You will guide the functional design and development of GRC solutions that align with the organization s compliance and control needs
(preferred)End-to-End Implementation Experience: At least 5 years of functional experience with SAP including end-to-end implementations in large organizations
Audit and Compliance Management: Proven experience in implementing and maintaining audit-ready control environments through Control Automation and strong collaboration with internal and external auditors
Interpersonal and intercultural skills and experienceStrong Communication and Interpersonal Skills: Ability to convey complex technical concepts to non-technical stakeholders and build strong working relationships across departments
Problem Solving and Critical Thinking: Adept at identifying issues and developing innovative solutions to meet compliance and business requirements
Leads Team Collaboration: Proven ability to lead cross-functional teams, facilitate discussions between business and IT, and drive consensus on complex projects
Change Management: Skilled in managing organizational change, particularly in transforming business processes and roles, ensuring smooth transitions with minimal disruptions
Attention to Detail: Exceptional focus on ensuring accuracy and compliance in complex GRC processes, controls, and system implementations
Time Management and Prioritization: Effective at managing multiple priorities, projects, and deadlines in fast-paced environment