SAP GRC Lead – Governance, Risk & Compliance

About the role

We are looking for an experienced SAP GRC Lead to drive governance, risk, and compliance activities within a large SAP transformation program. The role will design, implement, and monitor SAP GRC controls to ensure user access, role management, and regulatory compliance align with corporate policies.

Key responsibilities

• Lead implementation and optimisation of SAP GRC modules (Access Control, Risk Management, Process Control) across the SAP landscape.
• Design Segregation of Duties (SoD) policies, identify conflicts and implement mitigation strategies.
• Oversee user access reviews, role provisioning and audit remediation activities.
• Collaborate with business, functional and technical teams to resolve GRC‑related issues and enforce security governance.
• Develop and maintain GRC documentation, dashboards and compliance reports for leadership and audit purposes.
• Conduct risk assessments and control testing to strengthen system security.
• Provide guidance and advisory to project teams and business users on SAP security, GRC processes and regulatory compliance.

Required profile

• Proven experience in SAP GRC implementation and management.
• Strong knowledge of SoD policies, risk analysis and mitigation strategies.
• Hands‑on experience with user access reviews, role provisioning and audit remediation.
• Familiarity with corporate policies, regulatory standards and audit compliance requirements.
• Excellent leadership, advisory and communication skills.
• Bachelor’s degree in Computer Science, IT, Engineering or related field; SAP GRC or SAP Security certifications are a plus.

Required skills

• SAP GRC modules – Access Control, Risk Management, Process Control
• SAP Security and authorization concepts
• Segregation of Duties (SoD) design and analysis
• Risk assessment and control testing
• User access review and role provisioning
• Audit remediation processes