Senior SAP GRC Analyst: Finance Services: Bellville

Who are we?

Sanlam Life and Savings (SLS) is focused on serving our retail and corporate clients in South Africa and further developing our strategic advantages in the South African market. Sanlam Life and Savings consists of three clusters - Sanlam Corporate, Sanlam Retail Mass and Sanlam Retail Affluent. The Sanlam Life and Savings Office provides strategic direction, coordination and support to the three clusters, as well as performing governance oversight that includes assurance provided by second line of defense functions in SLS, to enable us to meet our business objectives.

Build a successful career with us

We’re all about building strong, lasting relationships with our employees. We know that you have hopes for your future – your career, your personal development and of achieving great things. We pride ourselves in helping  our employees to realise their worth. Through its five business clusters – Sanlam Fintech, Sanlam Life and Savings, Sanlam Investment Group, Sanlam Allianz, Santam, as well as MiWay and the Group Office – the group provides many opportunities for growth and development.

What will you do?

• The SAP GRC Analyst role will be responsible for supporting the Head of SAP GRC in managing and delivering an efficient financial control and compliance environment for SAP S/4 HANA and related finance systems, with a focus on centralisation, standardisation, automation, and optimisation of financial control compliance processes. 
• The SAP GRC CoE with its Internal Financial Control (IFC) function acts as a second line of defence in support of Business Units’ own financial control and compliance environments.
• The incumbent will partner with the Head of SAP GRC and Business Unit Heads to promote adherence to agree upon financial control compliance processes.  This role will furthermore be to support for the identification and reporting of non-compliance and recommendations on how this can be addressed.

What will make you successful in this role?

The key performance areas of this role include the following:

GRC Strategy Development

• Support the Head of SAP GRC in the development of the GRC strategy for SLS to ensure greater compliance to required standards.
• Support various strategic initiatives ensuring greater compliance and awareness in support of realising the GRC strategy.

Financial Risk and Controls Support

• Act as second line of defence in the design, implementation, and management of control processes and documentation​ by supporting the IFC function with maintaining financial risks and controls in the SAP GRC tool:
  • Maintenance of GRC Master data: organisations, processes, risks, controls, control performers/owners, firefighter owners/controllers, risk owners, role owners etc. in the repository (Process Control)
  • Creation, testing and maintenance of new automated business rules and assignment to controls (CCMs)
  • Creation of test plans for key controls
  • Support management in the identification, design, and implementation of IT General Controls

Optimisation

• Continue to identify, design, and implement optimisation opportunities in the financial control and compliance environment through innovation and automation.

Support SAP GRC Solution  

• Support the management and delivery of financial controls through SAP Access Control 12 and Process Control 12 applications:
  • Maintenance and Innovation of SAP Access Control and Process Control Processes, Technical Design including configuration. Processes include Access request management, Access Risk Analysis, Emergency Access Management and Business Role Management
  • Support in role design and approval by collaboration with the SAP Security team.
  • Maintenance of all SAP GRC design documentation as a result of technical design updates being made to the tool and processes
  • Support the SAP Security team in analysis of access risk analysis reports to remediate access risk violations.
  • Maintenance of Access Control custom ruleset at conceptual and permission/action level.
  • Design, implement and maintain mitigating controls in SAP GRC.
  • Deliver on SAP Access Control and Process Control reporting requirements from stakeholders.
  • Resolve SAP Access Control and SAP Process Control incidents alongside SAP IT function.
  • Liaise with the IT function for the maintenance and support of the SAP GRC solution.
  • Create and maintain standard operating procedures and training material relating to GRC processes.
  • Provide training to end users with regards to processes in SAP Access Control and Process Control.
  • Perform SAP Access Request administration activities.
  • Schedule manual control procedures for regular execution (MCPs and CSAs)
  • Schedule and monitor automated business rules for all CCM controls.
  • Schedule UAR and SOD review workflows.
  • Perform user acceptance testing of new and existing functionality in SAP GRC

Stakeholder Integration

• Support the Head of SAP GRC to operate as liaison between Business Unit management (first line of defence) and key stakeholders that include Internal Audit (3rd line of defence) and External Audit (4th line of defence).

Qualification and Experience

• Bachelor’s degree in finance, audit, or relevant field from a recognised institution.
• SAP certification is an added advantage.
• 4 years of functional experience in SAP technology
• 3 years experience in Risk and Compliance processes and controls.
• Functional, basic technical understanding of SAP Process Control is an added advantage
• 2 years comprehensive experience in SAP Access Control

Knowledge and Skills

• Functional, basic technical understanding of SAP Fiori is an added advantage
• Functional, basic technical knowledge and understanding of S/4HANA Security is an added advantage
• Audit or internal financial controls experience in SAP environment (S/4HANA) is an added advantage

Behavioral Competencies

• Must be tech savvy
• Must have the ability to communicate effectively 
• Should ensure accountability from all teams and stakeholders

Core Competencies

Being resilient - Contributing independently

Collaborates - Contributing independently

Cultivates innovation - Contributing independently

Customer focus - Contributing independently

Drives results - Contributing independently

Turnaround time

The shortlisting process will only start once the application due date has been reached. The time taken to complete this process will depend on how far you progress and the availability of managers. 

Our commitment to transformation

The Sanlam Group is committed to achieving transformation and embraces diversity.  This commitment is what drives us to achieve a diverse, inclusive and equitable workplace as we believe that these are key components to ensuring a thriving and sustainable business in South Africa.  The Group's Employment Equity plan and targets will be considered as part of the selection process.