Sap Security And Grc Analyst

Role & responsibilities

Job Specification for SAP JOB Role Test Case Reviewer

Purpose of the Role:

To support the SAP ECC to S4 Migration by ensuring the Job roles are created as per

the requirement by validating role design against business process requirements.

Perform test case authoring and post execution reviews by ensuring the role is

appropriately provisioned with no more and no less access and that the access risks are

effectively managed.

Key Responsibilities:

• Review Job roles by conducting SOD conflicts and risk analysis to ensure that

the business process role are created risk free.

• Perform Job test Case Reviews including Authoring and Design (TCA) and Post

Execution (PER) in ALM to GSK Standards in Informal and Formal

environment

• Identify and Log defects precisely and succinctly following TCA and PER reviews

for remediation by Testers

• Collaborate with business users, functional teams, and security teams to retest

and close out defects timely

Mandatory Requirements:

• Strong Understanding and Working knowledge on implementing SAP Security

& Authorization concept and Job/Role design evaluation and Security impact

Assessment

• Strong understanding/working knowledge on S4 Hana Fiori Apps, Fiori Catalog

and Authorization objects.

• Understanding of Security / GRC Controls / Mitigating Controls

• Experience on ALM Tool and SAP GRC Tool as user.

• Strong understanding of SoD conflicts and risk analysis

• SAP L4 Business Process Knowledge

• Ability to communicate with stakeholders effectively and operate under time

pressure

• Bachelor's degree in IT, Engineering or Computer Science

Optional / nice to have Requirements:

• SAP course certification or Linkedin training course Certificate on GRC / Access

/ Security Pharma / Life Science industry experience