SAP GRC Consultant – IT Audit & Access Controls

About the role

We are looking for an SAP GRC professional with a strong IT Audit background to manage and strengthen the SAP Governance, Risk and Compliance framework. The role requires hands-on expertise in SAP GRC Access Control, Segregation of Duties (SoD) risk analysis and IT General Controls (ITGC). It ensures the SAP environment stays secure, compliant and aligned with internal control and regulatory requirements.

What you'll do

• Design, configure and maintain SAP GRC Access Control, including access risk rulesets, mitigating controls and remediation workflows
• Conduct periodic reviews of SAP user access, role assignments, privileged access and Firefighter (emergency access) to identify and remediate SoD conflicts
• Monitor access controls across key business cycles, including Procure-to-Pay, Order-to-Cash and User Access Management
• Assess ITGC, application controls and infrastructure controls within SAP environments, benchmarking against frameworks such as NIST
• Work with IT and business stakeholders to investigate audit findings, track remediation and improve control effectiveness

What you need

• 4–6 yrs of experience
• SAP
• CISA
• Audit
• Vulnerability assessment
• Internal audit
• IAM
• B.Tech or B.E. or B.Sc or BCA

Good to have

• ITIL
• Accounts payable
• Accounts receivable
• PowerPoint
• Internal controls