SAP GRC Consultant – IT Audit & Access Controls
ChennaiFull-time4–6 yrsPosted 1 week ago
Mid-level IT audit role at SAM Manpower and Career Services in Chennai. Needs 4–6 years and a B.Tech, B.E. or B.Sc.
About the role
We are looking for an SAP GRC professional with a strong IT Audit background to manage and strengthen the SAP Governance, Risk and Compliance framework. The role requires hands-on expertise in SAP GRC Access Control, Segregation of Duties (SoD) risk analysis and IT General Controls (ITGC). It ensures the SAP environment stays secure, compliant and aligned with internal control and regulatory requirements.
What you'll do
- Design, configure and maintain SAP GRC Access Control, including access risk rulesets, mitigating controls and remediation workflows
- Conduct periodic reviews of SAP user access, role assignments, privileged access and Firefighter (emergency access) to identify and remediate SoD conflicts
- Monitor access controls across key business cycles, including Procure-to-Pay, Order-to-Cash and User Access Management
- Assess ITGC, application controls and infrastructure controls within SAP environments, benchmarking against frameworks such as NIST
- Work with IT and business stakeholders to investigate audit findings, track remediation and improve control effectiveness
What you need
- SAP
- CISA
- Audit
- Vulnerability assessment
- Internal audit
- IAM
Good to have
- ITIL
- Accounts payable
- Accounts receivable
- PowerPoint
- Internal controls