IN_ Manager_SAP Security GRC_SAP_Advisory_Bangalore

Job Profile: At PwC, our people in business
application consulting specialise in consulting services for a variety of
business applications, helping clients optimise operational efficiency. These
individuals analyse client needs, implement software solutions, and provide
training and support for seamless integration and utilisation of business
applications, enabling clients to achieve their strategic objectives. As a SAP
consulting generalist at PwC, you will focus on providing consulting services
across various SAP applications to clients, analysing their needs, implementing
software solutions, and offering training and support for effective utilisation
of SAP applications. Your versatile knowledge will allow you to assist clients
in optimising operational efficiency and achieving their strategic objectives.

Job Description & Summary:A career within SAP Consulting services will provide you
with the opportunity to help organizations strengthen their Governance, Risk,
and Compliance (GRC) framework through SAP GRC solutions. As an SAP GRC
Techno-Functional Consultant, you will work with business and IT stakeholders
to design, implement, and support SAP GRC solutions that enable effective risk
management, regulatory compliance, access governance, and audit readiness. You
will leverage SAP GRC Access Control (AC), Process Control (PC), Risk
Management (RM), and Audit Management solutions to help clients automate
controls, manage segregation of duties (SoD), mitigate risks, and comply with
internal and external regulatory requirements in SAP S/4HANA environments. SAP
GRC modules include AC, PC, RM, and Audit Management capabilities for
governance and compliance management.

Job Position Title:IN_SM_SAP-GRC _SAP_Advisory_Bangalore, Pune

Responsibilities:

• Lead

end-to-end implementation, configuration, enhancement, and support of SAP
GRC modules including Access Control (AC), Process Control (PC), Risk
Management (RM), and Audit Management in SAP S/4HANA environments.

• Perform

business requirement gathering, fit-gap analysis, and solution design
related to risk management, access governance, segregation of duties
(SoD), security controls, and compliance requirements.

• Design

and implement SAP GRC processes to strengthen governance, mitigate risks,
and ensure regulatory compliance.

• Configure

SAP GRC solutions including Access Request Management (ARM), Access Risk
Analysis (ARA), Emergency Access Management (EAM/Firefighter), Business
Role Management (BRM), Continuous Controls Monitoring, Process Control,
Risk Management, and Audit Management. SAP GRC Access Control includes
ARA, ARM, EAM, and BRM capabilities.

• Configure

risk rulesets, mitigating controls, workflow approvals, user provisioning
processes, and compliance monitoring frameworks.

• Collaborate

with SAP Security, Basis, Functional, Audit, Risk, Compliance, and
Business Teams to ensure successful deployment and adoption of SAP GRC
solutions.

• Conduct

workshops, stakeholder meetings, user training sessions, and knowledge
transfer activities.

• Provide

advisory support on compliance frameworks, internal controls, risk
mitigation strategies, and control automation best practices.

• Create

and maintain business process documents, functional specifications,
configuration guides, workflows, reports, and governance artifacts.

• Support

internal and external audits through control testing, evidence collection,
compliance reporting, and remediation management.

• Configure

and enhance continuous monitoring solutions, exception management
processes, and compliance dashboards. Process Control supports automated
control monitoring and exception reporting.

• Monitor

emerging SAP GRC capabilities and recommend improvements aligned with SAP
S/4HANA transformation initiatives.

• Troubleshoot

and resolve SAP GRC-related incidents, workflow issues, and compliance
risks.

• Support

pre-sales activities, estimations, solution design, and proposal
preparation related to SAP Security and GRC offerings.

• Drive

continuous improvement initiatives to enhance organizational risk posture,
access governance maturity, and compliance effectiveness.

Mandatory Skill Sets:

• SAP

Governance, Risk & Compliance (SAP GRC)

• SAP

GRC Access Control (AC)

• SAP

GRC Process Control (PC)

• SAP

GRC Risk Management (RM)

• SAP

Audit Management

• Access

Request Management (ARM)

• Access

Risk Analysis (ARA)

• Emergency

Access Management (EAM / Firefighter)

• Business

Role Management (BRM)

• Segregation

of Duties (SoD) Analysis & Remediation

• User

Access Review (UAR)

• Risk

& Compliance Frameworks

• SAP

Security & Authorization Concepts

• SAP

S/4HANA Security and Controls

• Workflow

Configuration and Approval Management

• Internal

Controls and ITGC Compliance

• Audit

Support and Compliance Reporting

• Stakeholder

Management and Consulting Skills

Preferred Skill Sets:

• SAP

Business Integrity Screening (BIS)

• SAP

Access Governance

• SAP

Security Role Design and Authorization Management

• SAP

Fiori Security

• SAP

Identity Access Governance (IAG)

• SAP

BTP Security & Compliance

• SAP

GRC Integration with SAP ECC and S/4HANA

• SAP

Process Automation and Control Automation

• SAP

Analytics and Compliance Dashboards

• Knowledge

of SOX, GDPR, ISO 27001, COBIT, COSO Frameworks

• SAP

Activate Methodology

• Risk

Control Matrix (RCM) Development

• Pre-sales

and Solution Architecture Experience

Years of Experience Required:

• **10

to 12+ years** of overall SAP experience.

• 7 to 10+ years of relevant SAP GRC experience.

• Experience

in SAP GRC AC, PC, RM, and Audit Management implementations.

• At

least 2 end-to-end SAP GRC implementation projects preferred.

• Experience

in S/4HANA transformation or upgrade engagements is desirable.

Education Qualification:

• Bachelor's

degree in Engineering, Computer Science, Information Technology, Cyber
Security, Commerce, or a related discipline.

• MBA,

PGDM, or equivalent postgraduate qualification preferred.

• SAP

GRC Access Control and/or SAP Security certifications preferred.

• Professional

certifications such as CISA, CRISC, CIA, CISSP, or ISO 27001 Lead
Implementer are desirable.