EYRisk Consulting - Digital Risk - SAP GRC - ITAC - Manager
About this role
The opportunity
We are looking for experienced professionals with strong SAP GRC Access Control, SAP security, ITAC and ITGC experience to join the Risk Consulting - Digital Risk team. This role provides an opportunity to lead SAP GRC and IT controls engagements, mentor offshore teams, support growth of the SAP GRC service offering and work with stakeholders across sectors.
Your key responsibilities
- Lead SAP GRC/ITAC and IT risk consulting engagements across SAP ECC and SAP S/4HANA environments, including planning, execution, quality review and stakeholder reporting.
- Manage SAP GRC Access Control workstreams covering Access Risk Analysis, Emergency Access Management, Access Request Management and Business Role Management as applicable to client scope.
- Lead ITGC and ITAC assessments including risk and control matrix review, walkthroughs, Test of Design, Test of Operating Effectiveness and remediation tracking.
- Review SoD risk analysis, sensitive access reviews, SAP security role assessments and remediation plans for quality, accuracy and audit readiness.
- Drive ERP control assessments covering logical access, change management, backup and restoration, incident management and automated business controls.
- Guide SAP GRC solution configuration, testing and optimization activities, including rule set rationalization, workflow validation and UAT coordination.
- Manage engagement economics, timelines, deliverables, issue logs and status updates in coordination with client stakeholders and internal leadership.
- Mentor seniors, consultants and analysts, provide coaching on SAP GRC, ITAC testing methodology, documentation standards and client communication.
- Support proposal inputs, capability building, knowledge sharing and development of reusable accelerators for SAP GRC and IT controls engagements.
- Coordinate with internal audit, external audit and client teams to ensure evidence completeness, clear issue articulation and timely follow-up.
Skills and attributes for success
- Strong command of spoken and written English with the ability to communicate complex SAP GRC and audit matters clearly.
- Excellent project management, engagement leadership and stakeholder management skills.
- Highly analytical, organised and meticulous consulting approach with strong attention to detail and quality assurance.
- Ability to manage multiple priorities, work under pressure and deliver high-quality outputs within tight deadlines.
- Strong team leadership skills with a focus on coaching, accountability and collaborative problem solving.
- Proficiency in MS Office, working knowledge of Excel-based analysis, data validation and reporting tools such as Power BI or ACL are preferred.
- Flexibility to travel to onsite locations at short notice, based on client and engagement requirements.
To qualify for the role, you must have
- 8-12 years of experience in SAP GRC, SAP security, ERP controls, IT audit, internal audit or technology risk consulting.
- Hands-on experience in SAP GRC Access Control and strong understanding of SAP ECC, S/4HANA security and authorization concepts.
- Strong understanding of RCMs, ITGC, ITAC, SoD, sensitive access, control testing procedures and issue management.
- Experience leading control testing teams and reviewing deliverables for quality, accuracy and consistency with professional standards.
- Knowledge of audit and risk frameworks such as SOX, COSO, ICOFR and professional IT audit practices.
- Bachelor’s degree in Information Systems, Computer Science, Accounting, Finance or a related discipline.
- A valid passport for travel.
Ideally, you will also have
- Certifications such as SAP GRC, CISA, CRISC, CIA, Oracle Cloud Security or other relevant risk/technology credentials.
- Experience with Oracle Risk Management Cloud, ServiceNow IRM, Archer or other risk technology platforms.
- Experience in S/4HANA role redesign, SoD rule set rationalization, user access reviews, access provisioning workflows or continuous controls monitoring.
- Prior consulting experience supporting MENA clients or multi-entity SAP landscapes.
What working at EY offers
At EY, you will work on meaningful and varied client engagements while developing through coaching, practical experience and structured feedback. You will be part of an interdisciplinary environment that values quality, knowledge sharing and professional growth.
- Support, coaching and feedback from engaging colleagues.
- Opportunities to develop new SAP GRC, IT risk and audit skills.
- The freedom and flexibility to handle your role in a way that is right for you.
EY | Building a better working world
EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.
Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.
Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.
- Start applying with LinkedIn
- Apply Now Start
-
Please wait...
- Connect with us
- Our locations
- My EY
- Site map
- Legal and privacy
- Labor condition applications
- Cookie Consent Manager
-
Opens in a new tab.
-
Opens in a new tab.
-
Opens in a new tab.
-
Opens in a new tab.
-
Opens in a new tab.
EY refers to the global organization, and may refer to one or more, of the member firms of Ernst & Young Global Limited, each of which is a separate legal entity. Ernst & Young Global Limited, a UK company limited by guarantee, does not provide services to clients.
×Cookie Consent Manager
When you visit any website, it may store or retrieve information on your browser, mostly in the form of cookies. Because we respect your right to privacy, you can choose not to allow some types of cookies. However, blocking some types of cookies may impact your experience of the site and the services we are able to offer.