{"id":1945577,"url":"https://alion.io/job/rsm-us-senior-associate-sap-security-grc","title":"Senior Associate, SAP Security & GRC","company":{"id":8699,"name":"RSM US","domain":"rsmus.com","url":"https://alion.io/company/rsm","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":83,"open_postings":186,"ghost_share":0,"stale_share":0.667,"repost_share":0.005,"time_to_fill_p50_days":23,"computed_at":"2026-10-17T05:46:00Z"}},"role":"Enterprise Apps","role_family":"Enterprise Apps","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Gurgaon, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":21000,"max_usd":49000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":49},"experience_years_min":4,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"SOC 2","optional":false},{"name":"ABAP","optional":true},{"name":"HIPAA","optional":true},{"name":"SAP BTP","optional":true},{"name":"SAP HANA","optional":true}],"status":"live","first_seen_at":"2026-10-06T06:36:27Z","employer_posted_date":"2026-10-06","last_verified_at":"2026-10-18T01:18:08Z","board_verified":true,"closed_at":null,"days_open":12,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":12},"description":"We are the leading provider of professional services to the middle market globally, our purpose is to instill confidence in a world of change, empowering our clients and people to realize their full potential. Our exceptional people are the key to our unrivaled, inclusive culture and talent experience and our ability to be compelling to our clients. You’ll find an environment that inspires and empowers you to thrive both personally and professionally. There’s no one like you and that’s why there’s nowhere like RSM.\nRSM US Integrated Services India Private Limited supports RSM U.S. engagement teams across risk consulting, transaction advisory, technical accounting, financial consulting, technology and management consulting, tax, and assurance by providing access to skilled professionals across an extended business day. RSM US Integrated Services India Private Limited is a member of RSM International, the sixth largest global network of independent accounting, tax, and consulting firms. RSM’s vision is to be the first-choice advisor to middle market leaders globally.\nRisk Consulting helps clients address complex strategic, operational, compliance, technology, and governance challenges across dynamic business environments. The practice provides services across ERP advisory, automation and analytics, internal audit, SOX advisory, IT and technology audits, cybersecurity risk management, third-party risk management, SOC1/SOC2, governance risk and compliance, privacy and security risk, managed security services, digital forensics, incident response, and related risk advisory areas.\nThe Business Application Risk Solutions (BARS) practice supports consulting, internal audit, and external audit clients by bringing deep ERP, process automation, data analytics, security, controls, and governance capabilities. The ERP risk practice focuses on governance, risk, security, and compliance across the full lifecycle of core business applications, from implementation through steady-state operations.\nAbout the Role\nWe are seeking an experienced SAP Security, GRC, and Controls Integration professional to help lead and scale the SAP Security and GRC capability within the BARS practice. The role will involve leading client engagements, overseeing delivery quality, developing team capability, supporting practice growth, and working closely with U.S. and India leadership.\nThe ideal candidate should be able to think strategically about risk, controls, and access governance, while also being hands-on and delivery-focused. This role requires experience scoping, supervising, and executing SAP implementation risk assessments, SAP Security, SAP GRC, segregation of duties, controls transformation, process automation, data analytics, continuous controls monitoring, and managed services engagements.\nQualification and Minimum Entry Requirements\nBachelor’s or master’s degree in Engineering, Technology, Information Systems, Business, Finance, or a related discipline.\nMinimum 4 years of professional experience in SAP Security, SAP GRC and IT controls.\nPrior experience with a public accounting firm, large consulting organization, or global delivery environment is preferred.\nDeep expertise in SAP Security across SAP ECC and SAP S/4HANA, including authorization concepts, role design, authorization object analysis, access troubleshooting, Fiori authorizations, and access remediation.\nStrong hands-on experience with SAP GRC Access Control, including ARA, ARM, EAM, BRM, MSMP workflows, BRF+, connectors, synchronization jobs, ruleset maintenance, risk analysis, and mitigation controls.\nPractical experience with SAP GRC Process Control, including control design, automated monitoring, business rules, data sources, control testing, and continuous controls monitoring is a plus.\nExperience leading complex SAP Security and GRC engagements across implementation, transformation, assessment, optimization, controls, and managed services programs.\nExperience managing delivery teams, reviewing work products, mentoring resources, and building technical capability within SAP Security and GRC teams.\nExposure to other GRC, identity governance, access management, compliance, control monitoring, or risk management tools will be an added advantage.\nExposure to SAP Joule, SAP BTP, SAP IAG, SAP Cloud Identity Services, automation, analytics, AI-enabled controls, and emerging SAP technologies would be beneficial.\nExperience with SAP HANA, BW/BI, Ariba, IBP, MDG, SuccessFactors, BDC, SAC, or other SAP public cloud and integrated applications will be preferred.\nExperience with SOX, COSO, COBIT, ISO, NIST, HIPAA, FDA, and other IT controls methodologies and frameworks is a plus.\nStrong project management, stakeholder management, communication, analytical thinking, problem-solving, and leadership skills.\nDemonstrated ability to work in high-pressure client delivery environments while managing competing priorities and maintaining quality standards.\nExcellent verbal, written, and interpersonal communication skills in English, as the position requires frequent communication with RSM International clients.\nRelevant certifications such as SAP Security, SAP GRC, CISA, CRISC, CISSP, CISM, or equivalent certifications will be preferred.\nPosition and Key Responsibilities\nHelp lead the SAP Security and GRC team within the Business Application Risk Solutions practice and support capability growth across delivery, people development, methodologies, and market-facing initiatives.\nLead end-to-end SAP Security and GRC engagements across implementation, transformation, assessment, optimization, controls transformation, and managed services programs.\nManage SAP Security workstreams in SAP ECC and SAP S/4HANA environments, including requirements gathering, solution design, role build, testing, deployment, cutover, hypercare, and post-go-live support.\nLead SAP Security design and access governance activities, including role design, role redesign, authorization troubleshooting, Fiori authorizations, SoD analysis, sensitive access reviews, emergency access management, user access reviews, and access remediation.\nLead SAP GRC Access Control implementation and enhancement activities across ARA, ARM, EAM, BRM, MSMP workflows, BRF+, ruleset design, risk analysis, mitigation controls, connectors, synchronization jobs, and related GRC configuration activities.\nSupport SAP GRC Process Control initiatives, including control framework mapping, risk and control configuration, automated monitoring, business rules, data sources, control testing, and continuous controls monitoring.\nTranslate business process, compliance, audit, and internal control requirements into practical SAP Security and GRC solutions aligned with client risk and regulatory requirements.\nAdvise clients on SAP Security and access governance considerations across integrated SAP landscapes, including Fiori, HANA, BW/BI, BTP, Ariba, IBP, MDG, SuccessFactors, and other SAP applications, as applicable.\nManage client stakeholders, engagement plans, project timelines, issue resolution, deliverable quality, and team performance across multiple concurrent engagements.\nProvide a first-choice advisor experience to clients by delivering practical recommendations, maintaining strong client relationships, and ensuring high-quality engagement outcomes.\nDevelop reusable methodologies, solution accelerators, delivery templates, training materials, knowledge repositories, and other practice assets to support consistent and scalable delivery.\nMaintain awareness of emerging SAP technologies, including SAP Joule, SAP BTP, SAP IAG, SAP Cloud Identity Services, automation, analytics, and AI-enabled risk and controls solutions.\nEnsure engagement documentation, deliverables, and work products are compliant with firm quality standards and demonstrate sound professional judgment.\nExperience working with a team to provide services to numerous clients simultaneously.\nMust exhibit and have demonstrated excellent organization and project management, communication, interpersonal, and team collaboration skills.\nProfessional Conduct and Firm Expectations\nSuccessfully integrate the strategy and core values of the firm.\nHeighten the firm brand by demonstrating thought leadership and embracing the firm's marketing campaigns and related programs supported by the firm.\nProfessionally presents themselves at all times at the office and the client’s meetings. This includes but is not limited to appearance, communication, and actions.\nExercise professional skepticism, maintain confidentiality, and adhere to applicable professional standards, firm policies, and code of ethics while delivering client engagements.\nWork collaboratively as a part of the team and communicate effectively with RSM consulting professionals, supervisors, and senior management in the U.S. on a daily basis.\nAt RSM, we offer a competitive benefits and compensation package for all our people. We offer flexibility in your schedule, empowering you to balance life’s demands, while also maintaining your ability to serve clients. Learn more about our total rewards at https://rsmus.com/careers/india.html.\nRSM does not tolerate discrimination and/or harassment based on race; colour; creed; sincerely held religious beliefs, practices or observances; sex (including pregnancy or disabilities related to nursing); gender (including gender identity and/or gender expression); sexual orientation; HIV Status; national origin; ancestry; familial or marital status; age; physical or mental disability; citizenship; political affiliation; medical condition (including family and medical leave); domestic violence victim status; past, current or prospective service in the Indian Armed Forces; Indian Armed Forces Veterans, and Indian Armed Forces Personnel status; pre-disposing genetic characteristics or any other characteristic protected under applicable provincial employment legislation.\nAccommodation for applicants with disabilities is available upon request in connection with the recruitment process and/or employment/partnership. RSMis committed to providing equal opportunity and reasonable accommodation for people with disabilities. If you require a reasonable accommodation to complete an application, interview, or otherwise participate in the recruiting process, please send us an email at .","description_format":"text","description_chars":10381,"description_truncated":false,"requirements":{"experience_years_min":4,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Audit & Assurance Firms","Financial Advisory, Valuation & Restructuring","Management Consulting","Tax Advisory & Preparation"],"lifecycle":[{"event":"open","at":"2026-10-06T06:36:27Z"}],"visa":[],"liveness":{"score":55,"band":"ok","label":"Likely open","p_open":1,"p_active":0.606,"p_room":0.9,"age_days":10,"expected_fill_days":23,"reasons":["conf:1","stale_co","velocity","win:mid","comp:brand"],"computed_at":"2026-10-17T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/rsm-us-senior-associate-sap-security-grc","json_url":"https://alion.io/job/rsm-us-senior-associate-sap-security-grc.json","meta":{"generated_at":"2026-10-18T09:25:06Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":14033,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-19T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":8699},"rest":"https://alion.io/mcp/rest/get_company?id=8699"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Frsm-us-senior-associate-sap-security-grc"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Frsm-us-senior-associate-sap-security-grc"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Frsm-us-senior-associate-sap-security-grc"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/rsm-us-senior-associate-sap-security-grc\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Frsm-us-senior-associate-sap-security-grc"}]}