Sandton: SAP Governance, Risk, and Compliance (GRC) Lead posted by Blue Pearl PTY LTD

The role oversees access control, process control, and risk management frameworks, ensuring compliance with corporate, regulatory, and audit standards (such as SOX, GDPR, and ISO). Minimum requirement 10+ years of SAP experience, with 5+ years in SAP GRC design and implementation.

Experience and skill Hands-on experience implementing SAP GRC Access Control 12.0 or higher, including configuration of workflows, rule sets, and risk remediation.

Strong understanding of SAP Security and Authorization concepts across modules and platforms (ECC, S/4HANA, BW, Fiori, etc.).
Experience with SOX compliance, user access reviews, and audit coordination.
Proven experience integrating SAP GRC with SAP Identity Management (IdM) and Cloud Identity Services.
Knowledge of GRC Process Control and Risk Management modules is highly advantageous.
Familiarity with SAP Fiori security, S/4HANA role design, and authorization migration projects.
Experience in GRC rule set customization, BRF+ configuration, and MSMP workflow customization.
Strong background in security incident analysis, controls monitoring, and risk mitigation

Requirements

SAP Certified Application Associate SAP Access Control 12.0 (C_GRCAC_12) highly preferred.
SAP Certified Technology Associate SAP Security / Authorization Management advantageous.
CISA, CISM, or CISSP (ISACA / ISC certifications) highly regarded.
ITIL or Project Management certification (PMP, PRINCE2, or SAP Activate) advantageous.