SAP GRC Specialist

Job description

Envision Employment Solutions is currently looking for an SAP GRC Specialist for one of our partners.

THE ROLE

Every access request, every segregation of duties conflict, every compliance gap gets caught, addressed, and closed through the frameworks you build and maintain. You'll sit at the intersection of technology and governance, implementing and configuring SAP GRC solutions that keep the organization operating within regulatory bounds while giving the business room to move. You'll be the person stakeholders across the company turn to when they need to understand not just what SAP GRC can do, but what it should do for their specific risk landscape.

WHAT YOU’LL DO

• Implement and configure SAP GRC solutions across Access Control, Process Control, and Risk Management modules, tailored to specific business needs and compliance requirements
• Collaborate with stakeholders across departments to conduct comprehensive risk assessments, identify vulnerabilities, and develop mitigation strategies
• Design and implement governance frameworks, policies, and procedures that align with regulatory standards, industry best practices, and internal guidelines
• Analyze business processes to identify Segregation of Duties (SoD) conflicts, and design role based access controls (RBAC) and authorization profiles that keep users limited to what they actually need
• Provide ongoing support and maintenance for SAP GRC systems, including troubleshooting, performance optimization, and user training
• Lead GRC related projects and process improvements that drive organizational maturity in risk management and compliance
• Conduct regular audits and reviews of GRC processes and controls, evaluating effectiveness and recommending remedial actions
• Serve as a subject matter expert and trusted advisor on GRC matters for senior management, internal stakeholders, and external auditors
• Stay current on emerging regulatory requirements and GRC trends, and bring that insight back into the organization's risk and compliance posture

WHAT WE’RE LOOKING FOR

• Bachelor's degree in Information Technology, Business Administration, Finance, or a related field. A Master's degree is a plus
• 8+ years of experience implementing, configuring, and maintaining SAP GRC solutions, with a focus on Access Control, Process Control, and Risk Management modules
• Demonstrated expertise in risk assessments, governance framework development, and compliance program implementation in complex organizational environments
• A proven track record of leading GRC related projects, initiatives, or audits
• Professional certifications in SAP GRC and/or risk management (e.g., CISA, CRISC) are highly desirable
• Strong technical proficiency in SAP ERP systems, SAP Security concepts, user provisioning, and role administration
• Excellent written and verbal English

YOU’LL THRIVE HERE IF YOU

• You see access control as a design problem, not just a checkbox
• You can spot a Segregation of Duties conflict before it becomes an audit finding
• You're comfortable being the person both auditors and business teams come to for answers
• You like translating regulatory requirements into frameworks people can actually work with
• You want ownership over how governance and compliance actually function inside a business, not just theory on paper