01Overview
Overview
This role supports in the execution of day-to-day activities for SAP GRC deliverables for the PGT Global, PIRT. This role requires close collaboration with SAP Security project lead, SAP GRC lead and Global SAP GRC Manager to determine priorities of work intake around access provisioning and recertification and ensure that requirements are reviewed, solutions developed and implemented according to the project timelines. The role will also closely work with the PMO, SAP Security, myidM, portal, Global GRC, design authority, technical and control teams to design solutions coming in through work intake processes and provide periodic updates on activities. The scope of the role includes
Being hands on in GRC system to develop solutions and workflows and well versed with configuration and BRF+Ensure SAP project work while in project phase are addressed in a timely manner; in sustain phase are addressed within SLAServes as the liaison between Application Support, Security and GRC teams in understanding the requirements and building a solutionMaintain SAP GRC systems to be in compliance with the Security standards and policiesExecute the Quarterly SOX reportingAnalyzing SOD risks in partnership with the Control Organization Creative thinker with ability to apply analytical skills to different issuesShould be able to clearly communicate and articulate requirements with good presentations skillsBe able to work with a geographically spread team
Responsibilities
Management of SAP GRC workflows and master data in compliance with controls.Facilitate and execute GRC workflow and master data change activities including providing assistance/ guidance to functional/ technical teamsDefine and maintain GRC configuration standardsMonitor the GRC workflow and master data design to support Sarbanes-Oxley Compliance (SOX), including Segregation of Duties (SoD) and business/ technical sensitive transactionsWork with SAP Security and SAP Governance team to define GRC solutions and influence role build strategy in line with system capabilitiesProvide recommendations on ways to simplify/ streamline existing processes and controls to gain productivityEnsures SOX controls compliance by executing SAP security sector proceduresReviews OSS Notes, security patches; implements and tests those patches Manages the execution of SAP GRC reporting approach and adoption, including risk assessment processes, continuous monitoring, training and reporting (Providing consultation)Train users in IT processes and procedures; provide assistance during external and internal auditsParticipate and drive workshops and team discussions between SAP security and GRC teamsIntegrate security governance within overall control environment and sustain activities with the impacted partiesInteraction with audit, risk, and control personnel to explain and evaluate the structure and design of GRC processesPlan, communicate and coordinate key control (e.g., SOX) activities such as the quarterly related IT application control reportingReinforce correct SAP security and GRC procedures with project teams and third party provider teamsParticipates in security reviews Manage internal/ external audit relationships to maintain a positive outlook on the progression of SAP GRC processes (being informed)Work with Controls Governance and IT teams to ensure holistic approach is taken to remediate Corporate Audit findings
Qualifications
Bachelors/Masters Degree in Business, Information Systems, Computer Science (or equivalent) is required Minimum 9+ years of Total experience . Minimum 5+ years SAP security and 3+ years of GRC experience Minimum of 2 full life cycle implementations Preferred to have Information Security certifications such as CISA, CISM, CGEIT, CRISCKnowledge of COBIT, IT risk frameworks, and experience with ITIL processesExperience in an IT customer facing role; comfort and confidence interacting with various levels of users, including frontline managementAbility to communicate solutions and impacts to customers and stakeholdersAbility to contribute towards design and brainstorming sessions with larger Infosec groupAbility to excel in an aggressive, change oriented environmentAbility to support weekend and off-hours activities to support projectsService oriented attitude .