SAP GRC and Security - Assistant Manager - Hybrid, morning shift

About the job SAP GRC and Security - Assistant Manager (Makati) | Hybrid

Work Schedule: Morning Shift

Work Setup: Hybrid (3x onsite per week) | Makati

Eligibility: Open to local and expat candidates currently residing in the Philippines

Key Responsibilities:

• Support the SAP GRC and Security workstream in SAP S/4HANA implementation projects, focusing on access control, risk analysis, and role design.
• Configure and manage SAP GRC modules including Access Control (AC), Process Control (PC), and Risk Management (RM).
• Design and implement role-based access controls (RBAC), including single and composite roles, derived roles, and firefighting access.
• Perform risk analysis and remediation using GRC Access Risk Analysis (ARA) and Emergency Access Management (EAM).
• Collaborate with functional and technical teams to ensure secure integration across SAP modules and external systems.
• Support user provisioning, role testing, and access validation during project phases (SIT, UAT, cutover).
• Contribute to the adoption of SAP Activate methodology and Fit-to-Standard approach.
• Assist in implementing SAP Identity Access Governance (IAG) and integration with SAP BTP and cloud platforms.
• Provide post-go-live support and help resolve security and compliance issues.

Required Skills & Experience:

• 7 to 10 years of SAP experience with at least 2 full-cycle SAP S/4HANA implementations in GRC and Security.
• Strong hands-on experience in SAP GRC Access Control configuration and SAP security administration.
• Good understanding of SoD (Segregation of Duties), audit compliance, and regulatory frameworks.
• Familiarity with SAP Activate methodology and Agile delivery models.
• Exposure to SAP BTP, SAP IAG, and RISE with SAP is a plus.
• Experience in cross-module integration and secure role design across FI, MM, SD, and HR.

Certifications:

• Required: SAP GRC Access Control Certification
• Preferred: SAP Security Certification, SAP IAG Certification

Educational Background:

• Bachelors or Masters degree in Information Security, Computer Science, Engineering, or related field (B.Tech, MCA, etc.)