Description of Qualifications:

• Bachelor's degree in Computer Science, Information Systems, or a related field.
• Minimum 8 years of experience in SAP GRC implementation and support.
• Deep expertise in SAP GRC Access Control and Process Control modules.
• Strong understanding of SAP authorization concepts and security best practices.
• Excellent analytical, problem-solving, and communication skills - fluent English is a must.
• Ability to work independently and as part of a team
• SAP GRC certification is a plus, but not mandatory
• Advanced level in SAP Process Control automation rules implementation
• BRF+ knowledge and usage is a must
• At least multiple builds of at least configurable and ABAP report types controls automations

Continuous Control Monitoring (CCM):

• ability to articulate end-to-end lifecycle of an automated control, with examples, how they would configure a data source, write a business rule, and connect it to a control for automated testing.

GRC PC Master Data:

• Understanding of how the core master data objects (Organizations, Central Process Hierarchy) are structured and leveraged for assessments and reporting.

Troubleshooting:

• Practical approaches to troubleshooting common Process Control (PC) issues, such as a business rule failing or a connector not pulling data.
• Ability to design controls automation rules for SAP Process Control solution out of business requirements (at least hands on experience)
• Hands on experience with SQL and authorization traces in SAP systems
• ABAP/Fiori debugging skills are appreciated but not mandatory

SAP Process Control Configuration:

• Advanced level in SAP Process Control configuration and workflows setup (including new regulations, configuration of custom entity roles, custom fields etc.)
• Hands on experience with SAP Process Control workflows review and troubleshooting (via Fiori and ABAP backend)
• Advanced SAP BASIS skills are appreciated but not mandatory (ODATA services activation and maintenance, SAP Notes implementation, GRC BW services and data objects activation and maintenance, web services configuration and maintenance including debugging/log analysis, knowledge of database administration is an added value etc.)
• ABAP/Fiori/Webdynpro development skills are appreciated but not mandatory

Detailed Description of Qualifications:

SAP Process Control Automation:

• Advanced level in implementing SAP Process Control automation rules.
• Ability to design controls automation rules for SAP Process Control solutions based on business requirements, with hands-on experience.

Technological Knowledge:

• Proficient in BRF+; its knowledge and usage are essential.
• Experience with multiple builds of configurable and ABAP report type controls automations.
• Hands-on experience with SQL and authorization traces in SAP systems.

Development and Debugging Skills (Preferred but not Mandatory):

• ABAP/Fiori debugging skills are advantageous.
• ABAP/Fiori/WebDynpro development skills are also beneficial.

SAP Process Control Configuration:

• Advanced knowledge in SAP Process Control configuration and workflow setup, including:
• New regulations integration.
• Custom entity roles configuration.
• Custom fields configuration.

Workflow Review and Troubleshooting:

• Hands-on experience with SAP Process Control workflows review and troubleshooting using Fiori and ABAP backend.
• All skills as listed in SAP GRC Professional with below additional ones.
• Expert knowledge of Segregation of Duties business concept (ability to analyse and design SoD risks).
• At least advanced understanding of business processes where SoD risks appear.
• System concept design knowledge (ability to design SAP GRC modules according to business needs or at least design support).

SAP Process Control at least advanced knowledge:

• Workflows configuration and maintenance
• Module configuration (regulations, background jobs, business rules, data sources, business rules parameters, organizations, controls, fields customization etc.)
• Ability to design IT and business controls based on input about the process (at least ability to review design and return potential error/challenge points).
• Various system logs usage for various errors tracing (controls dependant as well as tool itself).
• PC authorizations management (authorization regular roles and SPRO/IMG configuration).
• BRF+ rules definition knowledge is a must.
• CCM, OET and DET processes configuration and maintenance.
• Custom fields creation and maintenance is very good to have, but not mandatory.
• At least advanced audit processes knowledge
• Previous working experience in validated environments is very good to have but not mandatory.
• ABAP/Fiori debugging skills are very good to have but not mandatory.
• Advanced SAP BASIS skills are very good to have but not mandatory (ODATA services activation and maintenance, SAP Notes implementation, GRC BW services and data objects activation and maintenance, web services configuration and maintenance including debugging/log analysis, knowledge of database administration is an added value etc.).
• ABAP/Fiori/Webdynpro development skills are very good to have but not mandatory.

Requirements 'nice to have':

• Custom fields creation and maintenance is very good to have, but not mandatory.
• At least advanced audit processes knowledge
• Previous working experience in validated environments is very good to have but not mandatory.
• ABAP/Fiori debugging skills are very good to have but not mandatory.
• Advanced SAP BASIS skills are very good to have but not mandatory (ODATA services activation and maintenance, SAP Notes implementation, GRC BW services and data objects activation and maintenance, web services configuration and maintenance including debugging/log analysis, knowledge of database administration is an added value etc.).
• ABAP/Fiori/Webdynpro development skills are very good to have but not mandatory.

SAP BASIS Skills (Preferred but not Mandatory):

• Advanced SAP BASIS skills for:
• ODATA services activation and maintenance.
• SAP Notes implementation.
• GRC BW services and data objects activation and maintenance.
• Web services configuration and maintenance, including debugging/log analysis.
• Knowledge of database administration is an added advantage.