03/05/2026 updated
SM
100 % available
Senior SAP GRC Security and Authorizations Consultant
Birmingham, United Kingdom
Worldwide
B.Eng. (Hons) Electromechanical EngineeringControles de AccesoAgile MethodologyAuditingChange ManagementComputer SecurityGovernance Risk Management and ComplianceIdentity ManagementRisk AnalysisSAP ApplicationsSAP GRCSAP HANASAP SecuritySarbanes-Oxley Act (SOX) ComplianceStakeholder EngagementTechnical Accounting
SAP Security and GRC Implementation
Expertise in SAP GRC Access Controls, role design, authorization troubleshooting, and S/4HANA security transformations across multiple industries
Access Governance and Compliance
Comprehensive knowledge of ITGC/SoX controls, audit preparation, GDPR compliance, and risk management frameworks
Programme Leadership and Delivery
Agile and Waterfall delivery methodologies, security workstream leadership, stakeholder engagement with business leaders and auditors
SAP Platform Technologies
S/4HANA Greenfield and Brownfield implementations, ECC6, Fiori catalogs and spaces configuration
Security Operations
Role design and build, iterative deployment, cutover planning, hypercare support, and authorization troubleshooting
Risk Assessment and Analysis
SoD risk assessments using GRC ARA, mitigation planning coordination, and compliance reporting
Change Management
Process definition for role and user updates, integration into delivery cadences and control frameworks
Audit and Documentation
Audit-ready documentation preparation including RACM updates, SOPs, signoff packs, and Go-Live access matrices
Expertise in SAP GRC Access Controls, role design, authorization troubleshooting, and S/4HANA security transformations across multiple industries
Access Governance and Compliance
Comprehensive knowledge of ITGC/SoX controls, audit preparation, GDPR compliance, and risk management frameworks
Programme Leadership and Delivery
Agile and Waterfall delivery methodologies, security workstream leadership, stakeholder engagement with business leaders and auditors
SAP Platform Technologies
S/4HANA Greenfield and Brownfield implementations, ECC6, Fiori catalogs and spaces configuration
Security Operations
Role design and build, iterative deployment, cutover planning, hypercare support, and authorization troubleshooting
Risk Assessment and Analysis
SoD risk assessments using GRC ARA, mitigation planning coordination, and compliance reporting
Change Management
Process definition for role and user updates, integration into delivery cadences and control frameworks
Audit and Documentation
Audit-ready documentation preparation including RACM updates, SOPs, signoff packs, and Go-Live access matrices
Project history
Led the Security & GRC workstream for a S/4HANA Brownfield implementation, drafting security approach and leading requirement workshops with Business and Functional teams
Led global SAP role redesign across Supply Chain and Finance, delivering clean-slate remediation post-KPMG audit using Agile sprints and risk-driven prioritization
Led SAP Security & Controls workstream for an OFGEM-regulated UK energy divestment programme, delivering on time and within budget