Governance, Risk and Compliance (GRC) Controller at RCL Foods

• We areseeking a highly skilled and experienced Governance, Risk and Compliance (GRC) Controller to join our Group Services Division. The role is responsible for strengthening governance over SAP/SYSPRO and other ERP access, managing user provisioning and authorisations, identifying access and segregation of duties risks, and supporting secure, compliant and optimised business role design across the group. The GRC Controller will act as a key custodian of ERP application security and access governance. The successful incumbent will make informed security decisions, resolve simple and complex authorisation matters, implement practical improvements, and help reduce access risk exposure across SAP/SYSPRO and other ERP platforms.
• If you have strong SAP/SYSPRO and ERP security experience, a practical understanding of access risk and controls, and the ability to support secure, governed and efficient user access across a complex organisation, this role offers an opportunity to contribute meaningfully to the group’s governance, risk and compliance objectives.

Minimum Requirements    

• Relevant IT or BCom degree.
• Minimum of 3 years’ experience in a GRC or SAP/SYSPRO Consultant role.
• Experience working with SAP/SYSPRO is essential.
• Thorough knowledge of core financial modules, GRC technology and the SAP/SYSPRO authorisation concept.
• Knowledge of security and control configuration across SAP/SYSPRO, GRC and/or related ERP technologies.
• Understanding business process controls, application security and the systems implementation lifecycle.
• Competence in one or more additional ERP or GRC applications such as SAP/SYSPRO S/4HANA, JD Edwards, MACs, Soterion or GRC solutions.

Desired  Experience

• Governance-focused, risk-aware and comfortable balancing business requirements with access control principles.
• Strong problem-solving capability across both operational support and complex authorisation scenarios.
• Able to engage effectively with business managers, technical teams, Internal Audit and ERP stakeholders.
• Committed to continuous improvement, best practice adoption, documentation quality and secure role design.

Duties & Responsibilities    
Governance Risk and compliance (GRC)

• Own the GRC application, configure business requirements, identify user access and SoD risks, and support the implementation of financial and operational controls.

User Access

• Administer user provisioning and authorisations across SAP/SYSPRO and other ERP platforms; safeguard systems against unauthorised modification, destruction or disclosure.

Business Role and User Management

• Develop, configure and administer security components; manage role design and compliance; redesign roles for remediation and document mitigating controls.
• Document system security design, testing, implementation and support; assist business, IT and Internal Audit with access analysis and control assurance.
• Provide reports, technical insight, KPI information and advisory support to business managers and relevant group entities.

Policy and Procedure Compliance

• Technical design, development, testing, implementation, support, and documentation of system security around user access, business role management and risks within a SAP environment and other ERP systems.
• Work with various business and technical teams to build and maintain system security, participate in problem-solving, monitoring/resolving of technical incidents, researching and implementing best practice methods for role building, user access.
• Provide guidance and direction to other team members and ensure the technical competency of the team is maintained.

 Reporting

• Provide reports, information and technical insight to business managers as and when required.
• Provide advisory services to other business entities that fall into the Rainbow Foods group. • Provide information for monthly key performance indicators.

Team Coordination

• Take ownership of tasks, support team capability, communicate risks and deadlines, and demonstrate effective planning, prioritisation and stakeholder management.

ERP/application security knowledge

• Assist with the redesign and optimisation of Syspro security and access structures, including user roles, permissions, access controls, SoD and compliance initiatives.

Deadline:26th July,2026