SAP application Security & GRC Consultant

OneAPPS GmbH (www.oneapps.com) is a Technology consulting firm based out of Germany and offices across Europe. We are working on various projects involving diverse, multicultural teams with clients across the Europe. We are an invaluable partner and our teams have collaborated to support the growth of our clients. With more than 7 locations worldwide we help our clients to deliver their projects smoothly. We look forward to getting to know you and working with you.

Role: SAP application Security & GRC Consultant

Work mode: Hybrid - Office attendance is expected for every workshop in Bad Homburg

The Main Responsibilities

• Plan and execute client engagements focusing on SAP GRC, SAP security and audit readiness of SAP environments.

• Develop and implement SAP security solutions to protect SAP systems from both internal and external threats.

• Work with clients to identify opportunities for improvement in the areas of SAP GRC, SAP security and SAP controls.

• Responsible for delivering three core departmental responsibilities: Segregation of Duties (SOD) Analysis, GRC Administrator, and SAP Application security and user Provisioning Support

• Manage SAP GRC 12.x Access Control configuration and functions.

• Partner with business units and Internal Audit to ensure proper separation of duties among roles and responsibilities set per role and environment.

• Maintain documentation on Roles, GRC, Fiori and separation of duties.

• Assist with IT audit functions relating to identity and access management.

• Documentation updates including SOPs, Work Instructions and Knowledge articles.

• All other duties as assigned or directed.

• Experience role provisioning for SAP ABAP, JAVA and other SA products.

• Nice to have experience provisioning access SAP SAAS solutions like SAP SAC, SAP ARIBA etc.

• Experience leading SOX audit and cross team collaboration experience to follow up tasks non-security related.

Required Skillset:

• Experience in any of the following areas: SAP audit, SAP controls, SAP security design/re-design, SAP GRC implementation

• Experience in IT Risk Management, SOX compliance and/or auditing with a strong background in IT controls

• One full implementation experience on SAP Rise S/4 HANA , SAP GRC co-deployment scenario configuring GRC Access controls and Fiori configuration

• Minimum Four years of SAP security experience on SAP HANA security

• In depth SAP security, HANA Security, Fiori security & GRC knowledge and architecture skill

• Preferred experience with SAP GRC 12.0

• Experience with configuration of GRC module (ARA, ARM, EAM, BRM) with configuration parameter, workflow and data source and workflow tasks.

• Experience with SAP BRF+ (Specific to GRC), MSMP and troubleshooting skills to identify the issues related to BRF & MSMP.

• Setting up and updating new functions (Adding and removing T-Codes) and risks in the ARA module as needed.

• Setting up new controllers, owners, and role approvers.

• Understanding of GRC integration to IDM solutions using SAP GRC Webservices for user creation, termination, and provisioning.

• Setting up Mitigation controls and monitor the usage of mitigation controls.

• Excellent written and verbal communication, facilitation, and presentation skills with the ability to gain the confidence and respect of senior level executives.

Other Qualifications

• Ability to communicate clearly and professionally with all levels of the organization, both written and verbal

• Ability to work well in a team environment, to collaborate with others, and interface with team members internal and external to the organization.

• Establishes and maintains effective professional relationships with internal and external stakeholders.

• Must be able to adapt to organizational change.

• Flexibility and ability to plan, prioritize, and execute multiple tasks in a fast-paced environment

• Self-motivated, well-organized, and detail oriented

• Ability to work with customers to elicit complex requirements and translate them into manageable and implementable work units.

If this role sounds like you, we invite you to apply. Thanks.