SAP GRC Consultant – Risk Management

About the role

A full-time SAP GRC consultant position based in Dubai, focused on Risk Management. The role covers implementing, configuring and supporting SAP GRC Access Control and Risk Management solutions, working with business and audit teams on access and compliance risks.

Key responsibilities

• Implement, configure and support SAP GRC Access Control and Risk Management solutions.
• Configure Access Risk Analysis (ARA), Access Request Management (ARM), Business Role Management (BRM) and Emergency Access Management (EAM/Firefighter).
• Perform segregation of duties (SoD) and critical access risk analysis, and configure risk rules, functions, risks, mitigating controls and business processes.
• Run periodic user and role access reviews and support remediation of access violations.
• Work with business and audit teams to identify, assess and mitigate SAP access and compliance risks.
• Integrate SAP GRC with SAP ECC/S/4HANA and other connected systems, and troubleshoot workflows, connectors, synchronization and authorization issues.
• Support internal and external audits and prepare functional specifications, configuration documents, test scripts and user documentation.
• Take part in GRC upgrades, enhancements, testing and production support.
• In risk management: identify and assess access-related risks, maintain risk libraries and control frameworks, define and monitor mitigating controls, run risk assessments and generate risk reports and dashboards.

Required profile

• 8 to 10 years of experience.
• Bachelor's degree in Computer Science, Information Technology, Engineering or a related field.
• Strong analytical, communication and problem-solving skills.

Required skills

• SAP GRC Access Control and SAP Risk Management / Access Risk Analysis.
• SAP authorization concepts, roles, profiles, users and transactions.
• SoD, critical access, mitigating controls and compliance processes.
• MSMP workflow configuration and GRC connectors; integration with SAP ECC and/or S/4HANA.
• Preferred: SAP S/4HANA security, SAP Fiori and CDS authorization, SAP Cloud Identity Access Governance (IAG), ITGC, SOX and internal control frameworks, and SAP GRC certification.