SAP Security/GRC Consultant- Poland

Infosys Consulting is a globally renowned management consulting firm that works with market leading brands across sectors. The Digital Platforms Practice helps large global firms deliver value and business transformation enabled by digital ERP solutions and services, including strategy, implementation, and innovation.

• At least 5 years of consulting experience.
• Over 3 years of SAP Security and GRC consulting experience with multiple end-to-end implementations.
• Hands-on expertise with SAP ECC and/or S/4HANA Security.
• Strong experience configuring SAP GRC Access Control modules (Access Risk Analysis, Emergency Access Management, Access Request Management).
• Excellent client-facing and communication skills.
• Proven ability to manage multiple client engagements and deliver results on time.
• Strong knowledge of Sarbanes-Oxley (SOX), Business Process controls, IT General Controls, and IT governance.
• Experience in analysis and design/re-design of business process and IT General controls in SAP and non-SAP landscapes.
• Strong analytical skills with understanding of business processes and technologies.
• Experience supporting internal and external audits.
• Ability to retrieve, analyze, report, and present data from various sources.
• Understanding of data structures, sources, flow, and integration across infrastructures.
• Up-to-date knowledge of cloud services and multi-cloud environments.
• Experience with various ERP systems (SAP and non-SAP), operating systems, databases, and financial applications.
• Familiarity with Identity and Access Management and monitoring solutions such as Splunk, Qualys, and Tripwire.
• Experience with analytics and reporting in ITGC/GRC.
• Knowledge of IT service management tools like SNOW, BMC, and JIRA.
• Experience with SAP Identity Management (IdM).
• Knowledge of cloud-based SAP security and hybrid environments.
• Experience working in Agile/Scrum environments.
• Experience in global delivery and working with offshore resources.
• Willingness to travel.
• Bachelor’s degree in Computer Science, Information Technology, or related field.
• Over 7 years of experience in Financial/IT compliance, risk management, IT audit, and/or IT controls, including audit firm experience (e.g., Big Four).
• SAP Security or GRC certifications are a plus (e.g., SAP Certified Technology Associate – SAP Access Control).

Nice to have:

• SAP Security or GRC certifications.

• Lead SAP Security and GRC assessment, design, and implementation projects for clients across industries.
• Conduct client workshops and requirements gathering sessions to understand business and security needs.
• Design and configure SAP security roles, authorizations, and GRC Access Control components including Access Risk Analysis, Emergency Access Management, and Access Request Management.
• Develop and enforce Segregation of Duties (SoD) policies to mitigate risks and ensure compliance.
• Deliver SAP Security and GRC gap analysis, risk assessments, and remediation plans.
• Support clients during audits with documentation, reports, and facilitating access reviews.
• Provide strategic advice on SAP security best practices, compliance frameworks such as SOX, GDPR, HIPAA, and process improvements.
• Collaborate with cross-functional teams including Basis, functional consultants, and IT auditors to implement secure SAP landscapes.
• Conduct end-user training sessions and knowledge transfer workshops.
• Stay updated on SAP security trends, new releases, and regulatory changes for proactive consulting.

We would like to request you to kindly submit your CV in English. We cannot proceed with your application otherwise.