SAP GRC Consultant

SAP GRC Process Control Consultant

Role Overview

We are seeking an experienced SAP GRC Process Control Specialist to design, implement, and maintain the internal control and compliance framework. In this role, you will be responsible for automating control testing, managing continuous control monitoring (CCM), and aligning internal controls with organizational risk and compliance goals. Experience with SAP S/4HANA is strongly preferred to support our ongoing digital transformations and modernized control environments.

Key Responsibilities

SAP GRC Process Control Implementation & Operations

·                     Design & Configuration: Configure and maintain SAP GRC Process Control (PC) modules, including Master Data (Organizations, Process Maps, Sub-processes, Control Objectives, and Controls).

·                     Control Automation: Set up automated and semi-automated control testing, Continuous Control Monitoring (CCM), and continuous audits within SAP GRC PC.

·                     Assessments & Workflow: Design and execute control assessments (Design Effectiveness, Operating Effectiveness, Sub-process Design, and Self-Assessments) and configure GRC PC workflows/notifications.

·                     Issue & Remediation Management: Track control deficiencies, facilitate remediation plans, and generate compliance reporting for executive stakeholders and internal/external auditors.

S/4HANA & Security Integration

·                     S/4HANA Alignment: Translate traditional ECC controls and business processes into SAP S/4HANA environments, leveraging new S/4HANA business process flows, tables, and authorization models.

·                     GRC Architecture Integration: Integrate GRC PC with Access Control (AC) and underlying SAP S4 systems for seamless continuous monitoring.

·                     Audit & Compliance Support: Act as the technical liaison between IT, Risk & Compliance, Internal Audit, and external audit teams to demonstrate automated control effectiveness.

Required Skills & Qualifications

Technical Skills

·                     SAP GRC Process Control Expertise: Deep functional and technical hands-on experience configuring and supporting SAP GRC Process Control (v10.1, 12.0, or higher).

·                     Continuous Control Monitoring (CCM): Proven track record of configuring automated controls, data source connectors, business rules, and script execution in GRC PC.

·                     Risk & Controls Frameworks: Solid understanding of SOX 404, COSO, NIST, or similar internal control frameworks and compliance requirement mapping.

·                     Integration Knowledge: Experience linking GRC PC with SAP Access Control (AC) for unified governance and segregation of duties (SoD) management.

Preferred / Nice-to-Have Skills

·                     SAP S/4HANA Experience: Hands-on experience with control frameworks and security paradigms in SAP S/4HANA (including Fiori applications and modern S/4 financial/operational processes).

·                     ABAP / SQL Basics: Basic understanding of SAP data structures, table schemas, and custom script logic for automated rules is a plus.

·                     Certification: SAP Certified Application Associate – SAP Access Control / Process Control is preferred.

Soft Skills

·                     Strong analytical, problem-solving, and process-mapping skills.

·                     Ability to translate complex IT and compliance topics for non-technical stakeholders.

·                     Excellent cross-functional collaboration with Audit, Security, Finance, and IT teams.