Delivery Compliance Lead

Job Summary

To support the SAP ECC to S4 Migration by ensuring the Job roles are created as per the requirement by validating role design against business process requirements. Perform test case authoring and post execution reviews by ensuring the role is appropriately provisioned with no more and no less access and that the access risks are effectively managed.   

Key Responsibilities

• Review Job roles by conducting SOD conflicts and risk analysis to ensure that the business process role are created risk free.
• Perform Job test Case Reviews including Authoring and Design (TCA) and Post Execution (PER) in ALM to GSK Standards in Informal and Formal environment    
• Identify and Log defects precisely and succinctly following TCA and PER reviews for remediation by Testers
• Collaborate with business users, functional teams, and security teams to retest and close out defects timely 

Skill Requirements

•      Strong Understanding and Working knowledge on implementing SAP Security & Authorization concept     and Job/Role design evaluation and Security impact Assessment   

      •      Strong understanding/working knowledge on S4 Hana Fiori Apps, Fiori Catalog and Authorization objects.

      •      Understanding of Security / GRC Controls / Mitigating Controls

      •      Experience on ALM Tool and SAP GRC Tool

• Design, maintain, and optimize the SAP GRC SoD risk ruleset.
• Strong knowledge on business processes to identify Segregation of Duties and sensitive access risks.
• Collaborate with business process owners, control owners, SAP Security teams, and Internal Audit to define and implement appropriate access controls.
• Review business role designs to ensure compliance with the Least Privilege Principle.
• Assess SAP roles, Fiori catalogs, Spaces and Pages, OData services, and authorization objects for potential SoD conflicts.
• Support SAP S/4HANA implementation and transformation projects by embedding security and compliance requirements into role design.
• Able to perform risk analysis for new roles, role changes, and user access requests.
• Recommend remediation strategies and compensating controls for identified SoD conflicts.
• Review Role Testing and role validation as per the business requirements
• Bachelor's degree in IT, Engineering or Computer Science

Other Requirements

SAP course certification or Linkedin training course Certificate on GRC / Access / Security Pharma / Life Science industry experience