SAP GRC / Audit / Risk Management

DXC Technology

Key Process & Technical Knowledge

The consultant should have strong expertise in:

SAP GRC Access Control (AC):

• User Access Management (UAR).
• Emergency Access Management (EAM / Firefighter).
• Access Risk Analysis (ARA).
• Business Role Management (BRM).

SAP GRC Process Control (PC):

• Control design, documentation, monitoring, and testing.
• Continuous Control Monitoring (CCM).
• Policy management & workflow.

SAP GRC Risk Management (RM):

• Enterprise Risk Management framework configuration.
• Risk assessment methodologies.
• Key Risk Indicators (KRIs).

SAP Audit Management (AM):

• Planning and execution of audit engagements.
• Integration with risk and process control.
• Audit reporting and follow-up tracking.

Integration Skills:

• SAP GRC with SAP S/4HANA security concepts.
• Interfaces with Identity Management (IDM) and LDAP/AD.
• Understanding of SoD (Segregation of Duties) frameworks.

Key Responsibilities

• Conduct requirement gathering workshops with Audit, Risk, Compliance, and IT Security teams.
• Configure and support GRC Access Control, Process Control, Risk Management, and Audit Management modules.
• Perform SoD analysis, remediation, and mitigating control design.
• Implement workflow automation for user provisioning and access approvals.
• Support business role design and access governance.
• Enable continuous monitoring of controls and risks in SAP and non-SAP environments.
• Provide expertise during internal and external audits.
• Deliver end-user and key-user training on SAP GRC functionalities.
• Work closely with Basis and Security teams to ensure compliance with corporate IT policies.
• Support cutover, hypercare, and ongoing compliance operations.