Analyst: SAP Grc and Authorisations - Johannesburg, South Africa - Positive Switch

Thabo Mthembu

Posted by:

Thabo Mthembu

beBee Recruiter


Description

Responsibilities:


  • Define and maintain an Access Risk and Control Strategy for AGP-A in conjunction with the various business
stakeholders

  • Create and maintain SAP Authorizations roles as per business requirements according to the role methodology
implemented in the AGP-A SAP Business systems (ECC, HCM, SCM, Gateway/Fiori, Enterprise Portal, Process

Orchestration, BW, GRC and Solution Manager)

  • Maintaining the SAP GRC System across all the modules implemented, including Access Control, Process
Control, and Risk Management

  • Directly or indirectly create, change, or delete users on the SAP Business Systems according to Joiners, Movers,
Leavers information, and other sources of information

  • Performing authorizations role assignment (direct or indirect) in the AGP-A Business systems, as well as related
authorizations profile assignments in the SAP HCM system

  • Maintain the Access Control Ruleset to identify key access controls in conjunction with the business
  • Perform Access Risk Analysis and liaising with the relevant Business Partners to remediate reported risks
  • Perform periodic Access Risk reporting providing evidence of compliance to external and internal stakeholders
  • Systems monitoring and resolving GRC, and Authorizations related issues across the systems landscape
  • Liaising with Basis support to resolve systems related issues, and keeping the GRC system current
  • Enduser support for any authorizations related issues
  • Execute ticket resolution according to Standard Operating Procedures, SLAs, and SOX audit output
  • Identify continuous business improvement and automation opportunities in the SAP GRC and Authorizations
environments, converting them into projects, and lead/assist the implementation

  • Maintaining the Human Resources Organizational Structure in terms of Job, Position and Reporting Lines
  • Periodic consistency checks to ensure user master data integrity, compliance to the authorizations concept and
methodology

  • Support SOX ITGC audits and satisfy requests of security and compliance teams
  • Liaise with external consultants on support cases and projects where necessary
  • Document and maintain documentation relating to the SAP Authorizations methodology as implemented by AGPA.

Qualifications:


  • Bachelors Degree or appropriate certificate in Information Systems or Enterprise Risk Management
  • Valid certification for SAP Authorizations or Governance, Risk and Compliance

Experience

  • Minimum of 3 years experience in building SAP Authorizations roles using SAP Best Practise
  • Minimum of 3 years experience in maintaining SAP GRC systems across all the modules
  • BRF+ configuration and maintenance for GRC Workflow implementation

Required skills, Knowledge and Competencies
Access Control ruleset maintenance

  • Good knowledge of Risk and Compliance Processes
  • SAP ECC and HCM objects, tables, and transactions
  • SAP Organizational Structure experience/knowledge advantageous
  • Effective customerfacing verbal and written communication skills, with ability to bring across abstract concepts
and build rapport with the business to ensure positive results in a multi-stakeholder organization

  • Excellent Excel skills
  • Logically minded with problem solving skills
  • Structured and efficient with selforganizing skills
  • Taking ownership of area of responsibility to provide business service delivery
  • Confident selfstarter
  • Attention to detail

More jobs from Positive Switch