At Zimele Technologies, we have reinvented how companies see, plan, and run their businesses. Our services and solutions allow our customers to uncover new insights, connect their strategy to their plans, and work in ways they had not previously thought possible. We are growing fast, constantly innovating, and couldn’t be prouder to help our customers move forward with confidence in a sophisticated and changing world.
People centric is the cornerstone and the heartbeat of what Zimele Technologies stands for, and we take pride in developing and investing in our people.
We are constantly looking for forward-thinking people who put customer experience at the forefront of every decision. Individuals who thrive on challenges and are ready to grab-holdthe opportunity of a lifetime. Because we fundamentally believe every colleague brings outstanding value to our overall being. We are a workplace where each person feels seen, heard, and valued, and can contribute their unique talent to our collective effort.
About the Job
We are seeking an experienced Senior SAP GRC Consultant to lead and deliver SAP Governance, Risk and Compliance (GRC) solutions as part of SAP S/4HANA implementation and transformation programmes.
The successful candidate will be responsible for the functional design, configuration, integration, testing and implementation of SAP GRC solutions, with particular focus on SAP GRC Access Control, including Access Risk Analysis (ARA), Access Request Management (ARM), Business Role Management (BRM), Emergency Access Management (EAM/Firefighter), and, where required, SAP GRC Process Control and Risk Management.
The SAP GRC Consultant will work closely with client business stakeholders, SAP S/4HANA functional and technical teams, SAP Security and Authorisations teams, integration and data teams, testing, change management and project management to ensure that the GRC solution effectively supports the client's governance, risk, compliance, security and internal control requirements.
The role requires an individual who can operate at both a strategic and detailed functional level, facilitate complex risk and security discussions, provide solution leadership and take accountability for the successful delivery of the SAP GRC workstream throughout the implementation.
The successful candidate will also be expected to provide subject matter expertise on SAP access governance, segregation of duties (SoD), critical access risks, role design, access provisioning, emergency access and compliance controls, while ensuring alignment with the client's internal policies, control framework and regulatory requirements.
Role Requirements
• A minimum of 5 (five) years of experience as an SAP GRC Consultant, SAP Security/GRC Consultant, or similar role, preferably with experience performing a Functional Lead or Workstream Lead role. · Proven experience delivering SAP GRC solutions as part of large-scale SAP S/4HANA implementations, upgrades, rollouts or transformation programmes.· • Strong functional knowledge and implementation experience in: - SAP GRC Access Control• Access Risk Analysis (ARA) - Access Request Management (ARM) - Business Role Management (BRM) - Emergency Access Management (EAM/Firefighter) - Segregation of Duties (SoD) and critical access risk analysis - SAP GRC Process Control and/or Risk Management would be advantageous.· • Strong understanding of SAP security and authorisation concepts, including roles, profiles, authorisation objects, organisational levels, user provisioning and access controls. • Experience working with SAP S/4HANA security and understanding of the differences and considerations associated with the S/4HANA security and authorisation model.· Experience integrating SAP GRC with SAP S/4HANA and other SAP systems, including understanding of connectors, synchronisation, repositories and integration dependencies.· Relevant SAP GRC, SAP Security or SAP S/4HANA certification would be advantageous. • Degree or Diploma in Information Technology, Computer Science, Information Systems, Business Administration, Risk Management, Accounting, Finance, or a related discipline. • Thorough understanding of the SAP Activate methodology and associated implementation phases and deliverables. • Strong understanding of governance, risk and compliance principles, internal controls, audit requirements and access governance. • Proven experience designing and implementing SoD rulesets, critical access rules and risk analysis frameworks in line with business and compliance requirements.· • Experience facilitating workshops, requirements gathering sessions, risk and control assessments, solution design discussions and playback sessions with business and control stakeholders.· • Strong stakeholder management skills with the ability to engage effectively with operational teams, process owners, risk and compliance teams, internal audit, management, executives and third-party vendors. • Excellent written and verbal communication skills in English. • Strong presentation, facilitation, analytical and problem-solving skills. • Ability to translate complex technical security and compliance concepts into practical business requirements and recommendations.· • Ability to work effectively within a fast-paced project environment and manage multiple priorities, risks, issues and dependencies. • Proven ability to build professional, collaborative and cross-functional working relationships with internal and external stakeholders.
Responsibilities, Knowledge & Skills required
• Act as the SAP GRC Functional Lead and take overall responsibility for the functional delivery of the SAP GRC solution. • Lead the design, configuration, testing and deployment of SAP GRC solutions, with particular focus on Access Control. • Provide functional leadership and guidance to SAP GRC, SAP Security and other project team members supporting the workstream. • Engage with business stakeholders, process owners, risk and compliance teams to understand current governance, access, risk and control processes, challenges and future-state requirements. • Facilitate requirements gathering, Fit-to-Standard, Fit-Gap, risk assessment, solution design and playback workshops with business and technical stakeholders. • Analyse business, security, risk and compliance requirements and translate these into appropriate SAP GRC functionality and solution designs. • Design and configure SAP GRC Access Control functionality, including Access Risk Analysis, Access Request Management, Business Role Management and Emergency Access Management. • Design, configure and maintain segregation of duties (SoD), critical access and critical action rules in accordance with the client's risk and compliance framework. • Analyse access risks and recommend appropriate mitigating controls, role redesign, access remediation or other risk treatment options. • Support the design and implementation of business roles and access governance processes in collaboration with SAP Security and business process teams. • Configure and/or oversee the configuration of GRC workflows, approval processes, access request processes and provisioning mechanisms. • Design and implement Emergency Access Management (Firefighter) processes, including firefighter IDs, assignments, controller responsibilities, log review and monitoring requirements. • Work closely with SAP Security and Authorisations teams to ensure alignment between GRC requirements, SAP roles, authorisations and the underlying S/4HANA security model. • Define and maintain integration requirements between SAP GRC and connected SAP systems, including SAP S/4HANA and other relevant SAP applications. • Work with technical and integration teams to establish and validate GRC connectors, system synchronisation, user and role data replication, and provisioning interfaces. • Identify functional gaps and recommend appropriate configuration, process changes, integrations, enhancements or developments where required. • Ensure that functional designs, configuration decisions, risk rules, workflows and control processes are appropriately documented and maintained. • Develop and review functional specifications where integrations, developments, reports, workflows or extensions are required. • Coordinate SAP GRC activities and dependencies with SAP S/4HANA functional, technical, security, data and integration workstreams to ensure an integrated end-to-end solution • Identify, manage and escalate functional risks, issues, dependencies and design decisions affecting the SAP GRC workstream. • Support the definition and implementation of the client's access governance, SoD and compliance framework within SAP GRC. • Support the analysis, remediation and resolution of access risks identified during implementation, testing and post-go-live activities. • Support the development of risk and control reporting, dashboards and management information required for governance, compliance and audit purposes. • Define and support SAP GRC testing activities, including unit testing, System Integration Testing, User Acceptance Testing, security testing and end-to-end business process testing. • Develop test scenarios and test scripts covering access requests, role provisioning, SoD analysis, risk remediation, emergency access and workflow processes. • Investigate and support the resolution of defects identified during testing and ensure that appropriate corrective actions are implemented. • Support business users, process owners, control owners and security teams during User Acceptance Testing and provide functional guidance to facilitate successful business acceptance. • Ensure appropriate traceability between business requirements, risks, controls, solution designs, configuration, testing and delivered functionality. • Support data migration and data validation activities relating to users, roles, authorisations, organisational structures and other GRC-relevant data. • Support cutover planning and execution, including GRC configuration, rulesets, workflows, user and role data, integrations, security and business readiness activities. • Provide functional support during deployment, go-live, hypercare and transition to operational support. • Support the development of training materials, process documentation, user guides and knowledge transfer activities for business, security and support teams. • Work closely with Change Management and Training teams to support adoption of new access governance, risk and compliance processes. • Provide subject matter expertise and advice on SAP GRC functionality, SAP security, access governance, SoD, risk management and compliance leading practices. • Support internal and external audit requirements by providing appropriate documentation, evidence, risk analysis and functional support where required. • Ensure that SAP GRC deliverables meet agreed project quality standards and are completed within agreed timelines. • Manage positive relationships with client stakeholders ranging from subject matter experts, process owners and control owners through to senior management and executives. • Provide clear and practical recommendations to clients on SAP GRC design, access risks, compliance requirements and opportunities to improve governance and control effectiveness • Contribute to the continuous improvement of SAP GRC processes, controls and operating models following implementation and during transition to business-as-usual support.
