Description
For one of my key customers based in the Netherlands, I currently require a SAP GRC Access Controls consultant to join the project from Mid-March.
Due to the COVID travel restrictions, this position will be performed fully remote with no travel required.
SPECIFIC details: GRC Access Controls Consultant
This position is to review SAP GRC Access Controls Rules Set/and perform a Clean-Up. This will be a hands on project based position and will be separated into two projects.
The details of the two project are below:
The current SAP GRC ruleset requires an update where you will look at two aspects.
1. Reviewing the current critical IT access risks and comparing them to best practices (SAP standard ruleset, the ruleset from our vulnerability scan tool and the ruleset of our external auditor).
2. Implementing the changes that come out of this review as well as the review that will be performed on the business risks and SOD's (the review itself will be done by the OpCo specialists.)
3. Review all current risk in the ruleset to make sure that they are in line with the descriptions.
4. Update and help reviewing the existing mitigating controls linked to the above mentioned risks.
The current Authorisation design in three of the SAP systems (ECC, HR and BW) needs to be improved.
Activities will include:
1. Evaluate and remove obsolete roles
2. Rename roles and redesign roles so that the names of roles comply with the authorizations they provide.
3. Identify and follow up/resolve SOD conflicts that exist in composite roles.
Start: Mid-March 2021
End: End of June 2021
Location: Remote
Rate: € Euros/day
Languages: English (French would be a big bonus)