SAP GRC Security Administrator

Job Purpose

The SAP GRC Security Administrator is responsible for managing SAP user access requests, SAP GRC workflows, and audit support. The role ensures compliance with security policies, segregation of duties (SoD) requirements, and internal control standards while supporting system access management.

Job Responsibilities

SAP User Access & Access Requests Management

• Administer SAP user accounts across Production, Quality, and Development environments.
• Process new SAP account creation, access changes, SAP account unlocks, password resets, and account validity extensions.
• Support user access reviews and execute user lock/removal activities.

SAP GRC Administration

• Support SAP GRC access requests and workflow approvals.
• Monitor open eConnect tickets and GRC requests as well as follow up on pending approvals to ensure all tickets and requests are closed timely.
• Troubleshoot workflow routing issues and manually reroute requests when required.
• Create and maintain GRC users and approval assignments.
• Maintain SAP role ownership information within SAP GRC.

Risk & Compliance Management and Audit Support

• Update risk classifications and maintain mitigation control mappings reviewed and approved by Finance Compliance team.

• Ensure compliance with internal security standards and access governance requirements.

• Support periodic security reviews and compliance assessments.

• Prepare audit evidences and respond to internal and external audit requests where required.

• Ensure security processes are documented and audit ready.

Qualifications

Education

• Bachelor's Degree in Information Technology, Computer Science, Information Systems, Accounting Information Systems, or related discipline.

Experience

• 2-5 years of SAP Security and GRC administration experience.

• Hands-on experience with:

  • SAP ECC
  • SAP GRC Access Control
  • User Administration (SU01)
  • Role Administration (PFCG)
  • Access Risk Analysis and SoD Controls

• Experience supporting IT audits.

• Experience with ITSM tools such as ServiceNow is advantageous.

Technical Skills

• SAP Security Administration
• SAP GRC Access Control
• User Access Reviews
• Audit Support

Soft Skills

• Strong analytical and problem-solving skills.
• Ability to manage multiple priorities and requests.
• Excellent stakeholder management and communication skills.
• Strong attention to detail and compliance mindset.
• Ability to work independently in a global support environment.