SAP GRC Process Control

Job description

**Key Responsibilities** **GRC Process Control Implementation & Support** - Design, configure, and maintain **SAP GRC Process Control (PC)**. - Implement **automated and manual controls** aligned with Ericssons compliance requirements. - Support **end-to-end PC lifecycle** (risk identification control creation testing remediation). **Internal Controls & Compliance** - Define and maintain **business process controls** for SAP modules (FI, MM, SD, HCM). - Map controls to **risks and compliance frameworks** (SOX, ITGC, internal Ericsson policies). - Ensure compliance with **audit and regulatory requirements**. **Control Testing & Monitoring** - Perform **control testing, effectiveness validation, and continuous monitoring**. - Configure **automated control monitoring** (Continuous Control Monitoring CCM). - Track and manage **control deficiencies and remediation plans**. **Audit & Risk Management Support** - Work closely with internal/external auditors. - Provide audit evidence and support **SOX audits, internal audits, and risk assessments**. - Conduct periodic **risk and control self-assessments (RCSA)**. **Reporting & Dashboards** - Develop and maintain **GRC PC dashboards, reports, and analytics**. - Provide management insights on: - Control effectiveness - Compliance status - Risk exposure **Integration & Collaboration** - Integrate SAP GRC PC with: - SAP Access Control (AC) - SAP Risk Management (RM) - Collaborate with: - Business process owners - IT teams - Security & compliance teams **Required Skills & Experience** **Technical Skills** - Strong experience in **SAP GRC Process Control (PC) 10.x / 12.x**. - Knowledge of: - **SOX compliance** - **Internal controls & ITGC** - Experience in: - Control design & configuration - Workflow setup - Business rule framework (BRF+) - Understanding of **SAP modules (FI, MM, SD)**. **Functional Skills** - Experience in **risk & compliance frameworks**. - Knowledge of **audit processes and regulatory standards**. - Telecom domain exposure (preferred for Ericsson environment). **Tools & Integration** - SAP GRC AC (Access Control) integration knowledge. - Familiarity with **Security controls, Segregation of Duties (SoD)**. - Experience with **SAP Solution Manager / SAP S/4HANA** (added advantage). **Soft Skills** - Strong analytical and problem-solving skills. - Good communication with stakeholders and auditors. - Ability to work in a **global IT environment (Ericsson setup)**. - Documentation and reporting expertise. **Typical Use Cases in Ericsson IT Account** - Managing **global compliance across telecom operations**. - Automating **internal controls for large-scale SAP systems**. - Supporting **multi-country audit requirements**. - Ensuring **regulatory compliance in telecom billing & finance systems**. **Experience Level** - **36 years**: Associate / Support Consultant **Certifications (Preferred)** - SAP GRC certification - SOX / Internal Audit certifications (CIA, CISA optional) **Sample Role Titles** - SAP GRC PC Consultant - SAP Risk & Compliance Analyst - SAP Internal Controls Specialist SAP GRC Functional Consultant