SAP GRC Lead

Act as the client application owner for the SAP GRC system, responsible for the

overall SAP GRC design and strategy.

*

Establish governance over GRC and SoD mitigation in collaboration with SAP

Security, IT Compliance and Internal Controls to ensure appropriate controls are

implemented within SAP security.

*

Responsible for the following processes:

o SOD reporting from SAP GRC AC ARA module; generating the report,

distributing the report, modifying the report to meet requirements. Liaise with

the global risk manager community to analyse and remediate any GRC risks

highlighted by the SOD report.

o Access Request Management via the SAP GRC AC ARM module; liaise with

business, SailPoint IdM team and SAP security team to support, monitor and

improve user access provisioning process.

o Emergency Access Management via the GRC AC EAM module; ownership of

the firefighter process, including provisioning and management of EAM

Activity logs.

*

*

Drive the SoD remediation exercise following the recent SAP project