We are partnered with a reputable global consultancy that are looking for a GRC Security Consultant to work on a very exciting LONG-TERM CONTRACT in the retail sector. 

Role: GRC Senior Security Consultant

Rate: Up to £550 per day (inside IR35)

Location: Nottingham

Style: Hybrid – 3 days per week onsite

Duration: 6 months (initially – view to extend)

Sector: Retail

Role description:

Consultant SAP GRC- A SAP Security and GRC Consultant plays a critical role in ensuring the confidentiality, integrity, and availability of SAP systems.

Key Responsibilities:

• SAP Security Support: Provide SAP Security support for various SAP environments (ECC, Portal, HR, BI, SRM, GRC, HANA DB, etc.) and SAP-related applications as part of a team.

• GRC Expertise: Experience in GRC access control, Risk Analysis and Remediation (RAR), and segregation of duties (SoD) mitigation and remediation.

• Authorization Management: Design and implement new authorization concepts, perform BW authorization and access, and handle SAP user administration.

• Project Involvement: Initiate, plan, and implement relevant projects related to SAP security.

Qualifications:

Education: Relevant degrees such as Bachelor’s or Master’s in Computer Science, Engineering, Information Systems, or related fields.

Certifications: Relevant certifications like SAP, X.509, SAML, HANA, S/4, GRC, CISSP, AWS, CISM, or CISA may be required.

Desired Skills:

• Functional expertise in GRC Access Control, Application Security, and Infrastructure Security.
• Familiarity with Fiori Artifacts, SAP ERP, and SAP Activate project methodology.
• Knowledge of IDM 7.2 / 8.0 applications and components.
• Experience:
• Review and resolve problems promptly.
• Manage tasks independently or as part of an international or local operations team.
• Understand and mitigate controls for SoD conflicts.

Key Skills:

• Deep understanding of SAP authorization concept.
• Excellent communication skills, knowledge of IT controls, business processes within a manufacturing environment.
• Knowledge of Segregation of Duties (SOD) with an understanding of business processes and applicable mitigating controls
• Understanding of information security baselining and risk frameworks/standards
• Understanding of periodic sap security reviews/audits
• Understanding and working experience in ITIL framework
• Understanding and working experience with a ticketing tool (ServiceNow)
• Experience in Agile methodology
• Must have worked on at least one implementation/roll out/upgrade.
• Clear understanding of business roles and processes.
• Good analytical skill
• Firefighter configuration and maintenance
• GRC request administration
• Cross-System risk analysis configuration
• Support team members on technical issues

If you are interested and have the relevant experience, please apply promptly and we will contact you to discuss it further.

Yilmaz Moore

Senior Delivery Consultant

London | Bristol | Amsterdam