Senior SAP GRC Consultant Risk & Compliance
Senior SAP GRC consultant leading implementations and advisory work on SAP GRC Process Control and Risk Management modules for a Saudi technology consulting firm — remote, B2B. Day to day: risk assessments, control design and monitoring, SOX/ITGC audit support, testing, and compliance reporting.
- Compensation
- Not disclosed
- Location
- Warsaw, Poland
- Work setup
- Remote
- Seniority
- Senior
- Employment
- Contract
- Experience
- Not specified
- Category
- Security
- Posted
Skills
Must have
- 8-10 years of technology consulting experience in SAP GRC Process Control (PC) and Risk Management (RM), including end-to-end implementation projects
- Proven experience leading or actively participating in critical client engagements focused on SAP GRC PC & RM solutions
- Strong client-facing communication skills (requirements gathering, expectation management, status reporting, escalation)
- At least 4-6 years of experience in a lead or managerial role on SAP GRC implementation projects
- Ability to define and execute unit, integration, and regression test scripts to validate end-to-end business scenarios
- Proficient in identifying and resolving complex functional issues/bugs during implementation, testing, and post-go-live support
- Hands-on experience overseeing the full lifecycle of SAP GRC PC & RM: design, development, integration, reporting, and daily ticket resolution
Nice to have
- Experience working with clients in the Saudi Arabian public sector
Full description
Senior SAP GRC Consultant Risk & ComplianceSaudi Arabia | Remote | B2B | Salary: negotiable
For our Client, a well-established and fast-growing technology consulting firm based in the Kingdom of Saudi Arabia, delivering enterprise-grade IT solutions to major clients across sectors such as energy, finance, and government, we are currently looking for an experienced Senior SAP GRC Consultant to join long-term digital transformation initiatives.
This role involves leading SAP GRC (Governance, Risk & Compliance) implementations and advisory projects. You will work closely with internal security, audit, and compliance teams, supporting risk management and regulatory alignment across complex SAP environments.
Resposibilities
##
SAP GRC Implementation & Configuration
- Lead or actively participate in the implementation, configuration, and optimisation of SAP GRC modules, particularly Risk Management (RM) and Process Control (PC).
Risk Assessment & Management
- Develop and implement the organisation's risk management framework within SAP GRC, defining risk appetite, owners, and responsibilities.
- Identify, assess, and prioritise risks across SAP business processes, including operational, financial, IT, and compliance risks.
- Design and implement risk mitigation strategies and controls, defining and tracking mitigating controls within the GRC system.
- Perform qualitative and quantitative risk analyses to understand the likelihood and impact of potential risks.
- Monitor data in real-time, leveraging automated risk monitoring functionalities.
Audit & Compliance
- Conduct audits and reviews to assess the effectiveness of internal controls, risk management practices, and governance processes, verifying compliance with regulations, policies, and procedures.
- Provide support during statutory and SOX audits, gathering evidence and preparing documentation required for compliance reporting.
- Assess the design and operating effectiveness of IT General Controls (ITGCs) and business controls supporting financial processes.
- Investigate and respond to audit findings, assisting in the development and validation of remediation plans.
- Ensure compliance with policies, procedures, and IT controls, including the implementation of Automated Control Monitoring (ACM) functionality where applicable.
Reporting & Analytics
- Generate reports and dashboards to provide insights into risk exposure, control effectiveness, and compliance status for management and stakeholders.
Collaboration & Communication
- Work closely with business stakeholders, functional teams, IT security, and auditors to align risk and compliance efforts with business objectives.