Assistant Manager - SAP-GRC
KPMG entities in India are professional services firm(s). These Indian member firms are affiliated with KPMG International Limited. KPMG was established in India in August 1993. Our professionals leverage the global network of firms, and are conversant with local laws, regulations, markets and competition. KPMG has offices across India in Ahmedabad, Bengaluru, Chandigarh, Chennai, Gurugram, Jaipur, Hyderabad, Jaipur, Kochi, Kolkata, Mumbai, Noida, Pune, Vadodara and Vijayawada.
KPMG entities in India offer services to national and international clients in India across sectors. We strive to provide rapid, performance-based, industry-focused and technology-enabled services, which reflect a shared knowledge of global and local industries and our experience of the Indian business environment.
We are seeking an experienced SAP GRC Consultant with 6-8 years of hands-on expertise in SAP Governance, Risk & Compliance (GRC) solutions. The ideal candidate will possess strong experience in SAP GRC Access Control, Risk Analysis, Emergency Access Management (EAM), Access Request Management (ARM), and User Provisioning, along with a solid understanding of SAP Security concepts across ECC, S/4HANA, and other SAP landscapes.
Equal employment opportunity information
KPMG India has a policy of providing equal opportunity for all applicants and employees regardless of their color, caste, religion, age, sex/gender, national origin, citizenship, sexual orientation, gender identity or expression, disability or other legally protected status. KPMG India values diversity and we request you to submit the details below to support us in our endeavor for diversity. Providing the below information is voluntary and refusal to submit such information will not be prejudicial to you.
- Implement, configure, and support SAP GRC Access Control solutions.
- Manage and maintain GRC modules including:
- Access Risk Analysis (ARA)
- Access Request Management (ARM)
- Emergency Access Management (EAM)
- Business Role Management (BRM)
- Perform Segregation of Duties (SoD) analysis, risk mitigation, and compliance assessments.
- Design and maintain SAP security roles, authorizations, and user administration.
- Work closely with business stakeholders to gather requirements and implement security controls.
- Conduct periodic user access reviews and compliance audits.
- Troubleshoot GRC-related issues and provide ongoing support.
- Support SAP S/4HANA transformation and security initiatives.
- Integrate SAP GRC with SAP ECC, S/4HANA, BW, CRM, SuccessFactors, Ariba, and other connected systems.
- Prepare solution documentation, test scripts, and operational procedures.
- Participate in security and compliance audits, including SOX and regulatory requirements.
Required Skills & Qualifications
- 6-8 years of experience in SAP Security and SAP GRC.
- Strong expertise in SAP GRC Access Control 10.x/12.0.
- Hands-on experience with ARA, ARM, EAM, and BRM.
- Knowledge of SAP authorization concepts, role design, and user administration.
- Experience in Segregation of Duties (SoD) analysis and remediation.
- Understanding of SAP ECC and S/4HANA security architecture.
- Experience with SAP Security role creation, maintenance, and troubleshooting.
- Knowledge of compliance frameworks such as SOX, Audit, and Regulatory Controls.
- Strong analytical and problem-solving skills.
- Excellent communication and stakeholder management abilities.
Preferred Qualifications
- Experience in SAP S/4HANA Greenfield/Brownfield implementations.
- Exposure to SAP Fiori Security and SAP BTP Security.
- SAP GRC and SAP Security certifications.
- Experience working in global delivery and support environments.
- Knowledge of Identity Access Management (IAM) concepts.
Nice to Have
- Experience with SAP SuccessFactors, Ariba, SAC, or SAP BTP integrations.
- Understanding of automated controls monitoring and risk management processes.
- Exposure to GRC upgrades, migrations, and implementation projects.
