We are seeking an experienced Senior Specialist SAP GRC to support and enhance governance, risk, compliance, and access management processes across a complex SAP landscape. This role focuses on General IT Controls (GITC), business process risk management, segregation of duties (SoD), and identity and access governance within both cloud and hybrid SAP environments.

The successful candidate will play a key role in designing, implementing, maintaining, and optimising SAP GRC and identity management solutions while ensuring compliance with regulatory, security, and audit requirements. This is a hands-on position requiring deep practical experience with SAP cloud IAM technologies rather than purely conceptual knowledge.

Key Responsibilities

• Manage and enhance SAP Governance, Risk & Compliance processes, including access management, risk monitoring, and control frameworks.
• Oversee governance around IT operations processes and General IT Controls (GITC) within the SAP landscape.
• Support the identification, assessment, and mitigation of business and IT process risks.
• Design, implement, configure, and maintain SAP access management and identity governance solutions.
• Act as a trusted advisor to business stakeholders, process owners, security teams, and system owners on risk, compliance, and access management matters.
• Evaluate the effectiveness of controls, recommend improvements, and drive remediation activities.
• Support internal and external audits by providing subject matter expertise and evidence relating to SAP controls and compliance processes.
• Lead discussions regarding application design, integration requirements, and security considerations across SAP platforms.
• Contribute to the ongoing development and professionalisation of the GRC function and related processes.
• Participate in governance, compliance, and risk management projects across both business and IT domains.

Technical Requirements

Candidates must demonstrate strong hands-on experience with SAP user access management and identity governance solutions within SAP cloud environments, including:

• SAP Cloud Identity Services (CIS)
• SAP Identity Authentication Service (IAS)
• SAP Identity Provisioning Service (IPS)
• SAP Cloud Identity Access Governance (IAG)
• SAP Business Technology Platform (BTP)

The role requires the ability to:

• Design access management architectures for SAP cloud and hybrid landscapes.
• Advise on appropriate use cases, limitations, and integration capabilities of SAP IAM technologies.
• Configure and administer SAP cloud identity solutions.
• Integrate SAP identity and access management tools with existing enterprise security platforms.

Required Skills & Experience

• Minimum 5 years of experience within IT Governance, Risk Management, Compliance, Internal Audit, or related disciplines.
• Strong practical experience working with SAP environments, including SAP authorisations, roles, profiles, and security concepts.
• Experience managing risks and controls across business and IT processes within SAP landscapes.
• Proven knowledge of SAP authorisation concepts in both on-premise and cloud environments.
• Hands-on experience with SAPGRC solutions, including:
  • SAP GRC Access Control
  • SAP GRC Process Control
  • Segregation of Duties (SoD) analysis and remediation
  • User access reviews and risk assessments
• Experience with one or more of the following technologies:
  • SAP Central User Administration (CUA)
  • SAP Identity Management (SAP IDM)
  • SAP Cloud Identity Access Governance (IAG)
  • SAP Identity Provisioning Service (IPS)
  • SAP Identity Authentication Service (IAS)
• Experience with SailPoint IdentityIQ is advantageous.
• Strong understanding of security, compliance, and governance requirements within enterprise SAP environments.
  
  

Personal Profile

• Excellent analytical and problem-solving skills.
• Able to balance risk, compliance, operational requirements, and business objectives.
• Strong stakeholder management and communication skills.
• Comfortable working with technical teams, auditors, security specialists, and business process owners.
• Proactive, pragmatic, and solution-oriented approach.
• Ability to maintain a broad perspective while managing detailed compliance and access management requirements.

Qualifications

• University degree or equivalent level of education and professional capability.
• Fluent in Dutch and English, both written and spoken.

Location

• Utrecht, Netherlands
• Hybrid working model with occasional travel to other locations as required