SAP GRC COnsultantThe eCEOs · Singapore

SAP GRC COnsultant

🗓️ Posted 2026-09-07 Singapore Contract Hybrid ICT
💰 Salary Not shared 📊 Market S$6,000–S$10,000/mo

Responsibilities

  • ● SAP GRC Consultant - 5+ Years ExperienceRole Overview
  • ● Configure, implement, and support SAP GRC Access Control solutions across SAP ECC and S/4HANA landscapes.
  • ● Work extensively on GRC ARA, ARM, EAM/Firefighter, and BRM modules.
  • ● Perform Segregation of Duties (SoD) analysis , risk identification, remediation, and mitigation.
  • ● Design and maintain SAP security roles, business roles, composite roles, derived roles, and authorization concepts.
  • ● Configure and maintain GRC workflows, MSMP, BRF+, connectors, connector groups, and synchronization jobs .
  • ● Manage user access requests, approvals, provisioning, role assignments, and de-provisioning.
  • ● Configure and administer Firefighter IDs, owners, controllers, and log review processes .
  • ● Develop and maintain GRC rulesets, functions, risks, actions, permissions, and mitigation controls.
  • ● Perform role redesign, authorization cleanup, access reviews, and periodic user access certification.
  • ● Troubleshoot GRC integration and authorization issues and coordinate with SAP Basis, Security, and functional teams.
  • ● Support SAP S/4HANA and Fiori security and authorization requirements.
  • ● Participate in GRC implementation, rollout, upgrade, migration, enhancement, and production support projects.
  • ● Work with business process owners and compliance teams to understand access requirements and control risks.
  • ● Support SOX, ITGC, internal/external audit, and compliance activities and provide audit evidence.
  • ● Prepare functional specifications, configuration documents, test scripts, training materials, and operational documentation.
  • ● Conduct SIT/UAT testing , support defect resolution, and coordinate with technical teams.
  • ● Provide production support and resolve SAP GRC/Security incidents within agreed SLAs.
  • ● Analyze existing security and GRC processes and recommend improvements to access governance and controls.