Description:
We are seeking an experienced SAP Roles, GRC & Controls Lead to support a large-scale SAP transformation programme within a complex enterprise environment. This role will be responsible for defining and governing SAP security, authorisations, governance, risk, and controls frameworks throughout the transformation lifecycle. Working closely with programme leadership, business stakeholders, and technical teams, you will ensure that security and compliance requirements are embedded into the target SAP landscape from design through deployment.
Key Responsibilities:
- SAP Security & Authorisation Strategy
- Lead the design and governance of SAP roles and authorisation frameworks
- Define scalable role design principles aligned to business processes and segregation of duties requirements
- Establish security standards and governance controls across SAP transformation workstreams
- Governance, Risk & Compliance (GRC)
- Lead SAP GRC activities including:
- Segregation of Duties (SoD) analysis
- Risk assessment and remediation
- Access governance and controls
- Compliance reporting
- Ensure alignment with internal audit, risk, and regulatory requirements
- Transformation Programme Support
- Work closely with functional and technical teams across SAP workstreams
- Review solution designs to ensure compliance with security and controls requirements
- Support transformation activities including:
- Design workshops
- Testing and validation
- Cutover planning
- Go-live readiness assessments
- Stakeholder Management
- Partner with:
- Programme leadership
- Internal controls teams
- Audit and compliance functions
- Business process owners
- System integrators and third-party vendors
- Provide expert guidance on SAP controls, security, and governance matters
Key Skills:
- Extensive experience leading SAP Security, GRC, and Controls initiatives
- Strong knowledge of:
- SAP Authorisations and Role Design
- Segregation of Duties (SoD)
- Access Controls
- SAP GRC solutions
- Experience supporting large-scale:
- SAP S/4HANA transformations
- ERP modernisation programmes
- Strong understanding of:
- Internal controls frameworks
- Risk management
- Regulatory and audit requirements
- Proven stakeholder management and leadership capability