SAP Security/GRC Consultant

About the role

Infosys Consulting's Digital Platforms practice is hiring a full-time SAP Security/GRC Consultant in Madrid. You will work with diverse clients to assess SAP security risks, design and implement tailored SAP Security and Governance, Risk & Compliance (GRC) solutions, and act as a trusted advisor helping clients align SAP security frameworks with their business objectives and compliance mandates.

Key responsibilities

• Lead SAP Security and GRC assessment, design and implementation projects for clients across industries
• Conduct client workshops and requirements gathering sessions
• Design and configure SAP security roles, authorizations and GRC Access Control components (Access Risk Analysis, Emergency Access Management, Access Request Management)
• Develop and enforce Segregation of Duties (SoD) policies
• Deliver gap analyses, risk assessments and remediation plans
• Support clients during audits with documentation, reports and access reviews
• Advise on SAP security best practices and compliance frameworks such as SOX, GDPR and HIPAA
• Collaborate with Basis, functional consultants and IT auditors, and run end-user training and knowledge transfer sessions

Required profile

• At least 5 years of consulting experience, including 3+ years of SAP Security and GRC consulting with multiple end-to-end implementations
• Bachelor's degree in Computer Science, Information Technology or a related field
• More than 7 years of experience in financial/IT compliance, risk management, IT audit and/or IT controls, with strong audit-firm experience (e.g. Big Four); SAP Security or GRC certifications are a plus
• Proven track record of managing multiple client engagements on time
• Willingness to travel and experience in global delivery with offshore resources

Required skills

• Hands-on SAP ECC and/or S/4HANA security and SAP GRC Access Control
• SOX, IT general controls, business process controls and IT governance
• Identity and access management tools such as Splunk, Qualys and Tripwire; IT service management tools such as Snow, BMC and JIRA
• Experience with SAP Identity Management (IdM) and cloud-based SAP security
• Agile/Scrum and cloud/multi-cloud environments

Candidates should submit their CV in English. Infosys Consulting offers competitive compensation, training and development opportunities.