وظيفة مهندس SAP Security & GRC لدى YASH Technologies Middle East في الرياض

Position Summary

Experienced SAP Security & GRC professional with over 15+ years of expertise in SAP Security, Role Design, Governance Risk & Compliance (GRC), and enterprise access control. Proven track record in leading end-to-end SAP implementations, global security transformations, and S/4HANA security design across complex landscapes.

Key Responsibilities

SAP Security & Role Management

• Lead design and implementation of SAP Security architecture across ECC, S/4HANA, BW/4HANA, Ariba, IBP, SuccessFactors, and BTP environments
• Design and maintain enterprise role matrix aligned with business processes and regulatory requirements
• Develop single, composite, and derived roles using PFCG and authorization concepts
• Design authorization concept for S/4HANA systems including Fiori tile-based access
• Prepare Fiori security design, catalog mapping, and role assignment strategy
• Support S/4HANA implementation security strategy

SAP GRC AC, IAG and Cloud Security Implementation & Governance

• Implement SAP GRC Access Control modules including ARA, ARM, BRM, EAM, and UAR
• Design and configure SOD rule sets and risk mitigation controls
• Build risk and control matrices aligned with SOX and internal audit requirements
• Implement emergency access management (Firefighter IDs) and monitor logs
• Implement IAG for Ariba, IBP, SuccessFactors, and BTP cloud applications
• Implement SAP Identity Access Governance (IAG) services including Access Request, Access Analysis, Access Certification
• Configure custom rule sets for cloud applications
• Enable hybrid access governance between on-prem and cloud SAP systems
• Support privileged access management

GRC Process Control, Audit & Risk Management

• Risk Framework Development: Establish risk catalogs, assess risk likelihood and financial impact, and define risk mitigation strategies within the SAP platform.
• Control Design & Automation: Map business processes, design internal controls (SOX, Segregation of Duties), and configure Automated Continuous Control Monitoring (CCM).
• Testing & Remediation: Manage control self-assessments, evaluate control effectiveness, track testing evidence, and address identified deficiencies.
• Audit & Reporting: Generate compliance dashboards, maintain control documentation, and assist internal/external auditors with compliance reviews.
• Workflow Configuration: Set up roles, notifications, and approval workflows for surveys, testing, and issue resolution.

Key Skills

SAP Security (ECC, S/4HANA, BW/4HANA, Fiori, BTP, ARIBA, IBP), SAP GRC (AC, PC, RM), SAP IAG, SuccessFactors RBP, CUA, SOX Compliance, IT Audit, SOD Management.