The role ensures compliance with internal IAM standards, regulatory requirements, and industry best practices by establishing processes for user access provisioning and risk analysis within the SAP GRC system.
Requirements
- Hands-on experience with SAP GRC Access Control 12 modules (ARA, ARM, BRM, EAM)
- Strong knowledge of SAP Security concepts, role design, and user administration, including experience with S/4HANA, BTP Security, and Cloud Identity Services.
- Experience with Active Directory integration for authentication and provisioning (On-Premise and EntraID (Azure AD))
Responsibilities
- Administer SAP user provisioning and de-provisioning workflows, and access requests using GRC Access Control (ARM).
- Manage privileged access assignments and monitor usage logs (EAM).
- Work with functional and technical teams to design, maintain, and test SAP roles.
- Perform risk analysis for new and existing roles to identify potential SoD conflicts.
- Lead the execution of regular SoD and critical access reviews using GRC Access Risk Analysis (ARA).
- Ensure GRC system connectivity with SAP landscape is functioning as expected.
- Support configuration and ongoing maintenance of SAP GRC Access Control modules.
Other
- English (Required)
- Ability to plan and manage projects and solve complex problems by applying best practices
- Ability to provide direction and mentor less experienced teammates.
- Ability to interpret and convey complex, difficult, or sensitive information
- Banking or financial services experience