SAP Authorisation Manager at Ernst & Young Global Limited (EY)

Job description

General skills required

• Deep understanding of SAP Authorisations concepts and SAP GRC (mainly Access Control and Process Control, Hana Data Base) technical configurations. This may include ERM and internal controls principles, methodologies and approaches and how this impacts the internal control environment.
• Ability to manage team and delivery for SAP Authorisations and SAP GRC technology implementations e.g., some SAP GRC modules such as Access Control, Hana Database, Risk Management, Process Control, Audit Management and possibly others.
• Ability to have business development and market conversations and presentations covering the newest trends in SAP Authorisations and SAP GRC technology solution and business considerations during the selection of a GRC technology and how SAP solutions compares to other GRC solutions.
• Ability to draft and present proposals and sales presentations to executives and c-suite forums about SAP GRC business and technology requirements including market trends, suggestions to improve GRC management in different industries, and address the client’s business and technology requirements to improve their internal control environment.
• Understanding of GRC technology solutions in the market and the technical requirements that clients are looking for to compliment and support their SAP GRC management processes.

Knowledge and experience required

• A postgraduate degree or equivalent.
• 10 - 15 years SAP Authorisation experience with an SAP Security / GRC relevant certification and Hana Data Base experience as an advantage. GRC (mainly Access Control and Process Control).
• Experience and understanding of Agile methodology.
• Significant expertise in understanding risks and identification and design of controls specifically the automation of SAP GRC activities within a SAP GRC technology including SAP Authorisations as part of any S4 SAP implementation project.
• Technical design and configuration of SAP AC ruleset will be a benefit.
• Significant expertise in understanding SAP access risks and identification and design of access controls.
• Proven experience in dealing with multiple, senior stakeholders e.g., executives, c-suite personnel, etc.
• Proven experience working with project teams and SAP functional teams with significant integration requirements.
• Extensive exposure to GRC and risk management projects in large organisations, with an understanding of the enablement thereof.
• Proficient with Fiori Security and Role based security concepts and security role designs.
• Understanding of SAP SU24 objects and values in roles is critical.
• Ability to create Fiori catalogs / groups.
• Experience, knowledge and understanding of user provisioning, role mapping and access governance.
• Full SAP life cycle implementation experience on projects i.e. requirement gathering, architectural design, technical role build and test (PFCG), technical design documentation, realisation.
• SAP knowledge and experience in other SAP applications preferable i.e. SolMan Focus Build, BI/BW, SAC, PI/PO, HANA DB, EWM, MDG.

Roles, skills and attributes required

•  In order to achieve success in this role, it is key that the incumbent demonstrates the following:
• Deep specialised skills and competency of ERM business needs and technical solutions in the market with the ability to explain the value of a SAP GRC technology to clients.
• Strong leadership style and effective people management skills
• Excellent communication and presentation skills.
• Strong analytical and problem-solving skills combined with strong influencing / negotiating skills.
• Ability to operate within a matrix structure global organisation with different reporting lines, stretched sales targets and mentor and manage people.
• Effectively manage client meetings/discussions with key business stakeholders.