KPMG—Consultant-SAP Security GRC

Job description

Description: same as external Role Responsibilities: - An ideal candidate should have good knowledge and be willing to research new solutions based on the requirements - Design, implement, and manage SAP GRC solutions, including Access Control (AC), Process Control (PC), and Risk Management (RM). - Configure and maintain GRC modules in line with business requirements and industry best practices. - Monitor GRC system performance, ensuring optimal operation and minimal downtime. - Ensure compliance with relevant laws, regulations, and company policies (e.g., SOX, GDPR). - Good knowledge of various techniques like GRC Access Control (AC), Identity Access Governance (IAG), GRC Process Control (PC), GRC Risk management (RM), Single sign on (SSO), SAP BTP Cloud Identity services, GRC Audit Management (AM) would be a big plus. - Demonstrate commitment to continuous improvement through regular discussions with the client and/or internal teams to assess service delivery. - Look out for potential risks on client engagements diligently and highlight leadership proactively. - Understands overall SAP enterprise system landscape and can perceive functional requirements - Provide guidance and support to junior consultants. - Strong verbal communication skills and ability to Establish a rapport with clients and colleagues - Strong organizational and analytical skills Requirement: - Bachelor’s degree in computer science, Information Technology, or a related field. - Perform BRF+ rule modifications and enhancements to support business specific risk and workflow requirements. - Hands on experience in S4 upgrade and SAP Message Server monitoring program(MSMP) setup. Candidate should have the ability to perform in a dynamically changing environment. - Strong analytical and problem-solving skills. - In-depth knowledge of SAP modules (e.g., SAP ECC, S/4HANA, BW/4HANA, SAP Fiori). - Familiarity with regulatory requirements such as SOX, GDPR, and HIPAA. - Effective communication and interpersonal skills. - Ability to work independently and within a team. - Strong experience in Monitoring and error handling in SAP PI/PO or SAP CPI. - Experience in handling tickets across priorities. - Ability to flexible to stretch and ready to learn new Technologies/process whenever necessary. - Experience with development, Application Maintenance support(AMS) and implementation/enhancement of the full suite of SAP GRC products, at least SAP GRC Access Control and SAP GRC Process Control but also experience in other SAP application such as S/4 HANA, Fiori, Lumira, IDM, GRC Risk Management, Audit Management, Fraud Management etc is desired. - Ability to perform Solution Architect tasks working on defining solutions in response of client request for proposal, technical design and development of SAP GRC AC or PC functions for programs, projects and change requests. - Propose continuous improvements to drive business efficiencies. - Experience in end-to-end SAP GRC project implementations, ability to conduct workshops, manage and plan for UAT, Regression Testing, Cutover and Hyper care activities. - Perform BRF+ rule modifications and enhancements to support business specific risk and workflow requirements. • Configure and maintain MSMP workflows, including initiation conditions, path configurations and agent assignments. • Experience in SAP GRC support pack upgrades, including regression testing and post-upgrade validations. • Configure and support EAM, including FF ID provisioning, log review processes, and controller assignments. •Carry out SAP GRC AC configurations, including role risk assessment, ruleset updates and mitigation controls. •Experience with design, develop and maintain roles in SAP S/4 HANA systems, ensuring alignment with business needs and compliance standards. •Create and manage Fiori tiles and catalogs for the end users. •Strong troubleshooting skills to identify and resolve authorization related issues in S/4HANA. •Experience with translating control framework requirements into an authorization concept. •Experience with Fiori and / or (embedded) BW authorizations is an advantage •Experience with IAM solutions is an advantage •Develop new technical skills in a very short time and this gives you energy •Pay attention to details, but you also know how to keep an eye on the bigger picture and communicate to the customer in a clear way •Experience with development of automated monitoring in SAP GRC Process Control based on connections with SAP ECC or SAP S/4 (e.g. validation of configuration in these source systems) •Experience in creating Data sources and business rules for SAP ECC or SAP S/4. •Experience in creating UAT and Regression test scripts. Value-add if SAP certified - SAP GRC certification is highly desirable. - Certifications such as : CISSP, CISM or CISA Would be a plus Experience & Background - B-Tech/BCA/MCA/MBA - 3 – 6years of IT industry experience in SAP domain. - Should have excellent communication skills. Have strong analytical and logical Requirements: B-Tech/BCA/MCA/MBA Responsibilities: Manage SAP GRC / Security activities