SAP GRC and Internal Control

This is a remote position.

We are seeking an experienced Senior SAP GRC & Internal Controls Consultant to lead governance, risk, compliance, and internal control initiatives across SAP landscapes. The ideal candidate will design, implement, and optimize SAP GRC Access Control, Process Control, and Risk Management solutions, ensuring compliance with regulatory and audit requirements while strengthening internal controls.

Key Responsibilities

• Lead the implementation and support of SAP GRC modules: Access Control (AC), Process Control (PC), and Risk Management (RM).
  

• Design and maintain role-based access controls (RBAC), segregation of duties (SoD), and mitigating controls.
  

• Define and enforce internal control frameworks for SAP systems to ensure SOX, GDPR, and audit compliance.
  

• Collaborate with auditors and business stakeholders to identify risks, test controls, and resolve deficiencies.
  

• Integrate SAP GRC solutions with ECC, S/4HANA, BW, Fiori, and other systems.
  

• Manage user provisioning, firefighter IDs, emergency access management, and risk analysis.
  

• Provide advisory on control design, ITGC (IT General Controls), and risk mitigation strategies.
  

• Support internal and external audit requirements with necessary documentation and system evidence.
  

• Mentor junior consultants and act as subject matter expert in SAP GRC and internal controls.
  

Requirements

Qualifications & Skills

• Bachelor’s/Master’s degree in Information Systems, Computer Science, Finance, or related field.
  

• 8–12 years of experience in SAP Security, GRC, and Internal Controls.
  

• Strong expertise in SAP GRC Access Control, Process Control, and Risk Management.
  

• In-depth knowledge of Segregation of Duties (SoD), internal controls, and audit compliance frameworks (SOX, ITGC, GDPR).
  

• Hands-on experience in SAP S/4HANA security and Fiori role management.
  

• Strong analytical, problem-solving, and communication skills.
  

• Ability to work independently in a global, remote environment.
  

Nice to Have

• SAP Certification in GRC or Security.
  
• Experience with cybersecurity, cloud security (BTP, Azure, AWS).
  
• Familiarity with non-SAP GRC tools or enterprise risk management frameworks (COSO, COBIT).
  

Benefits

Benefits: 

• Competitive compensation package 
  

• Opportunities for professional development and career advancement.
  

• Flexible working conditions, with remote options available.
  

• Dynamic and supportive work environment.
  

Equal Employment Opportunity:

KATBOTZ LLC is an Equal Opportunity Employer. We provide equal employment opportunities to all qualified individuals, regardless of race, religion, gender, gender identity, age, marital status, national origin, sexual orientation, citizenship status, veteran status, disability, or any other legally protected status. As an organization, we are unwavering in our commitment to maintaining a discrimination-free work environment, and fostering a culture of inclusivity, belonging and equal opportunity for all employees and applicants.