Position: Junior SAP GRC
Company: ITernal Group
Experience required: 5y
English level: upper

**Requirements:**

- Minimum 5 years of Experience in SAP Security.
- Minimum of 3 years of GRC experience across various applications including but not limited to S/4 HANA, ECC, CRM, GRC, BW, MDG, Fiori, PI/PO, EWM, Enterprise Portal, & Solution Manager.
- Minimum 2 End-to-End Implementation/Rollout/Upgrade experience on GRC is preferred.
- Good understanding of ECC role design ( Job/Task based concepts ), SAP Security concepts, Landscape, Transports System, and Version Compatibilities.
- Mass user/role creation (single, composite, derived, master, enabler) using ECATT scripts.
- Knowledge on MSMP workflow Association with BRF+ Application.
- Experience in GRC areas — Account Request Management (ARM), Access Risk Analysis (ARA), Emergency Access Management (EAM), IT - Risk Management, SOX compliance and/or auditing with a strong background in IT controls.
- Understanding of the Ruleset and Mitigation Controls

**Responsibilities:**

- Securing tables by creating/changing authorization groups in se54.
- Worked on SU24/SU25 updates.
- Worked with AGR*, USR*, and Restricting tables through authorization groups using SE54 transaction.
- Providing Detailed Reports of Users, User Status, Roles, T-Codes and Authorization Objects.
- Troubleshoot SAP security errors efficiently and accurately.
- SPRO configurations for Access control.
- MSMP workflow Maintenance.
- Maintaining Rule Set, Function ID, Risk ID with Risk Owners and generating rules.
- Producing SOD Analytical Reports (both Summary and Detail) against Users, User Groups, Roles and Profiles using RAR.
- Create Mitigation control and assign the necessary Approvers / Owners.

**We offer:**

- Possibility to influence the development of the project.
- Friendly professional staff and warm atmosphere.
- Help with development via mentoring and coaching.
- The environment where you can implement your ideas.
- Flexible schedule and opportunities to work remotely (8 hours workday).
- Paid vacation and sick leaves.
- Participation in educational activities and thematic conferences.
- Team parties and corporate events.