SAP GRC Specialist

Purpose of the Job

• To manage Postbank security, enforce compliance policies, and mitigate financial or operational risks within SAP environment. The role is responsible for configuring SAP GRC Governance, Risk, and Compliance Access Control and Process Control modules, conducting Segregation of Duties SoD analyses, and streamlining internal audit processes to ensure effective governance, risk management, and compliance.

Job Responsibilities

• To manage Postbank security, enforce compliance policies, and mitigate financial or operational risks within SAP environment.
• Administer and maintain SAP user access and authorization roles.
• Design, configure, and maintain SAP roles and profiles in line with business requirements.
• Ensure compliance with the principle of least privilege and role-based access controls.
• Manage user provisioning, deprovisioning, and access reviews.
• Work closely with business process owners, auditors, SAP functional teams, and IT security teams.
• Provide guidance on security and compliance requirements during projects and system changes.
• Support SAP implementation, upgrade, and enhancement projects from a GRC perspective.
• Administer Firefighter IDs and Emergency Access Management EAM.
• Review emergency access logs and investigate exceptions.
• Ensure appropriate approvals and monitoring of privileged access.
• Configure and support SAP GRC Access Control and Process Control solutions.
• Perform Segregation of Duties SoD risk analysis and remediation.
• Monitor and mitigate access and compliance risks across SAP systems.
• Develop and maintain risk and control matrices.
• Plan and execute unit, integration, and system testing to ensure high-quality, stable solutions
• Generate compliance, risk, and access management reports.
• Monitor security violations and unauthorised access attempts.
• Develop dashboards and metrics for management reporting.
• Support internal and external audits by providing evidence and reports.
• Conduct periodic user access reviews and certification campaigns.
• Ensure compliance with regulatory requirements, corporate policies, and industry standards.
• Monitor control effectiveness and recommend improvements.

Qualification

• Bachelor's degree in computer science, Information Technology, or related field NQF Level 7
• SAP ECC Certification Access Control or Security.

Experience

• Minimum 8 years of experience in IT
• Minimum 5 years of experience as an SAP GRC Authorisation
• Minimum 5 years of experience with SAP ECC & S/4HANA Implementation & Support
• Minimum 3 years of experience with cloud platforms SAP Cloud, AWS & Azure
• Minimum 3 years of experience in banking or financial services
• Knowledge of SAP and SAP security concepts.
• Understanding of Segregation of Duties SoD risk analysis and mitigation.
• Experience with SAP user administration and role design.

Skills

• Knowledge of risk management, governance, and compliance frameworks.
• Strong analytical and problem-solving skills.
• Excellent written and verbal communication skills.

Attributes

• High level of integrity and professionalism.
• Strong attention to detail and accuracy.
• Critical thinker with good decision-making ability.
• Ability to work under pressure and meet deadlines.
• Strong collaboration and teamwork skills.
• Adaptable and willing to learn new technologies.