SAP GRC Lead (ERP)

TL;DR

SAP GRC Lead (SAP): Lead the design, implementation, and management of SAP GRC Access Control solutions, including ARA, EAM, ARM, and BRM, with an accent on security strategies, role design, and compliance reporting in S/4HANA environments. Focus on integrating GRC and IDM with Solution Manager/CALM, collaborating on regulatory adherence, and leading cross-functional teams.

Lisbon, Portugal

Company

Consulting firm delivering digital transformation in life sciences.

What you will do

• Lead design, implementation, and management of SAP GRC Access Control solutions.
• Define and enforce SAP security and authorization strategies across S/4HANA and legacy systems.
• Oversee role design, SoD analysis, and compliance reporting.
• Implement SAP IDM for user provisioning and lifecycle management.
• Integrate GRC/IDM with SAP Solution Manager/CALM for change control.
• Collaborate with audit, compliance, and IT security teams on GxP, SOX, and privacy regulations.
• Support audit remediation and lead cross-functional teams.

Requirements

• 12+ years hands-on in SAP GRC Access Control, rule sets, risk analysis, firefighting.
• Expertise in SAP Security/Authorization, Fiori roles, structural authorizations, custom roles.
• Strong knowledge of SAP IDM integration for user lifecycle.
• Experience with SAP Solution Manager (ChaRM, Test Suite) or Cloud ALM.
• Understanding of GxP, SOX, data privacy regulations.
• Strong communication, stakeholder management, leadership skills.

Nice to have

• Experience in Oil & Gas industry.

Culture & Benefits

• Flat structure with collaborative, global team focused on life sciences transformation.
• Up to 25 days per year remote from anywhere; flexible time off.
• CHF 1,500 annual learning budget, workshops, trainings.
• Competitive salary, referral rewards, loyalty benefits from year 3.
• Relocation assistance, visa help, local perks, global mobility support.

Hiring process

• CV review (2 weeks).
• Introductory call (15-30 min).
• Technical interview (30 min).
• Client interview if applicable (30-60 min).
• Final feedback.