SAP GRC Consultant
First seen by Alion on Oct 24, 2026.
Job Summary:
We are looking for an experienced SAP GRC Consultant with 6-10 years of hands-on experience in SAP GRC implementation, support, and SAP Security. The ideal candidate should possess strong expertise in SAP Governance, Risk, and Compliance (GRC), Segregation of Duties (SoD), user access management, IT General Controls (ITGC), and regulatory compliance frameworks. The consultant will be responsible for implementing and supporting SAP GRC solutions, managing compliance requirements, and ensuring secure and compliant SAP environments.
________________________________________
Key Responsibilities
• Lead and support end-to-end implementation of SAP GRC Access Control solutions across SAP landscapes.
• Provide ongoing production support and enhancements for SAP GRC applications.
• Configure and support SAP GRC modules:
o Access Risk Analysis (ARA)
o Access Request Management (ARM)
o Emergency Access Management (EAM)
o Business Role Management (BRM)
• Conduct Segregation of Duties (SoD) analysis and risk assessments.
• Design, build, and maintain SAP security roles and authorizations.
• Collaborate with business stakeholders to define and implement access governance processes.
• Support user provisioning, access reviews, role recertification, and compliance reporting activities.
• Ensure adherence to IT General Controls (ITGC) related to:
o User Access Management
o Privileged Access Management
o Change Management Controls
o Periodic Access Reviews
• Support internal and external audits, including SOX and compliance assessments.
• Analyze audit findings and recommend remediation plans and mitigating controls.
• Participate in SAP ECC, Fiori, and cloud security initiatives.
• Create and maintain security and compliance documentation, procedures, and process guides.
• Work closely with audit, risk, compliance, and business teams to ensure control effectiveness.
________________________________________
Required Skills & Experience
• 8-10 years of experience in SAP Security and SAP GRC implementation and support.
• Strong experience with SAP GRC Access Control.
• Hands-on expertise in SAP Security Authorizations and Role Administration.
• Experience in SAP ECC and SAP S/4HANA environments.
• Strong understanding of:
o IT General Controls (ITGC)
o Segregation of Duties (SoD)
o Access Controls and Governance
o Risk Management and Compliance
o Internal Controls Frameworks
• Experience supporting compliance requirements such as:
o SOX Compliance
o IT Audit Controls
o ISO 27001
o Corporate Governance Policies
• Knowledge of SAP Fiori Security and GRC integration.
• Understanding of user lifecycle management and access provisioning processes.
• Experience in handling audit requests and control testing activities.
• Strong analytical, troubleshooting, and problem-solving skills.
________________________________________
Preferred Skills
• Experience with SAP Identity Access Governance (IAG).
• Exposure to SAP BTP Security.
• Experience with GRC rule set maintenance and customization.
• Knowledge of ServiceNow-based access request workflows.
• Exposure to SAP Cloud applications security.
________________________________________
Educational Qualifications
• Bachelor's Degree in Computer Science, Information Technology, Engineering, or related discipline.
________________________________________
Preferred Certifications
• SAP GRC Certification
• SAP Security Certification
• CISA
• CRISC
• CISSP
________________________________________
Key Competencies
• SAP GRC Implementation & Support
• ITGC and Compliance Management
• Audit & Regulatory Compliance
• Risk Assessment and Mitigation
• SAP Security & Authorizations
• Stakeholder Management
• Problem Solving and Analytical Thinking
• Documentation and Process Governance