SAP Governance Specialist at Sasol

Purpose of Job

Act as a subject-matter expert for Access & Authorizations and SAP GRC. Maintain Access & Authorizations policies, procedures, and standards. Maintain the ruleset and mitigating controls in SAP GRC. Assist the SOX Centre of Excellence (CoE) to resolve ruleset queries. Assist the governance team to resolve Segregation of Duties (SoD) queries. Ensure technical roles are built according to policies, procedures, and standards. Provide support to internal and external audit. Assist with remediation of audit findings. Drive innovation within the ERP Access & Authorizations/GRC environment to ensure Sasol always realises the benefit.

• Take ownership for the SOX and audit related controls in the SAP GRC and Access & Authorizations space. Manage SAP licence management process.
• Evaluate & integrate SAP Fiori apps into SAP GRC.
• Perform outside research to develop expertise in SAP GRC security functionality and industry best practices within the SAP GRC, the IT risk management and compliance space.
• Provide technical leadership in the assessment, design, and implementation of SAP GRC security and IT risk solutions.
• Design, implement, and support business process and IT controls in an ERP environment, including new implementations, control redesigns, or assessment of ERP control framework.
• Understand ERP configuration as it relates to the development of automated controls.
• Strong knowledge of key business processes, the inherit risks, potential controls. • Understand leading practices as it relates to ERP control environments and provide recommendations on control design and implementation.
• Assess complex governance requirements, including Sarbanes Oxley (SOX), and provide leading practice recommendations as it relates to controls in an ERP environment.
• Perform the role of GRC subject matter specialist including the ability to provide in-depth application support to internal/external project team members.
• Understanding of GRC configuration and security concepts and procedures

Recruitment Description / Key Accountabilities

• Participate in design sessions with key Product stakeholders to create solutions that are aligned to the IM’s architecture standards and principles as well as SAP/ERP Best Practice, and that leverage common solutions and services, as well as meet financial targets.
• Within Sasol’s solution development lifecycle, in Discover & Describe phase the SAP/ERP Specialist Application Platform also participates in solution evaluation and selection, buy vs. build decisions from an SAP Integration and Solution perspective, and early-phase project estimates which contribute to the business case.
• They will also share their expertise during the Mobilise, Plan, Engineer, Deploy and Transition phases, and re-evaluate benefits realisation as required on both run and change, with cross functional DevOps teams supporting and end-to-end service offering, responsible for all activities across the technology stack, from application to infrastructure specifically to SAP/ERP.
• Internally, the SAP/ERP Specialist Application Platform will need to work specifically with Service Integration & Orchestration and strategic suppliers to deliver change where required, ensuring that solutions are integrated.
• They are responsible to drive AI OPS on the platform.
• Contribute to high level roadmaps for solutions and to also ensure they align with SAP/ERP Strategic roadmaps.
• Be familiar with Agile methods in order to effectively and efficiently architect solutions to meet the business needs.
• Internal to the organisation, ensure SAP/ERP Front end software is correctly deployed and maintained to the end user base.
• Responsible key SOX controls are maintained and pass within the operations chapter.
• Provide input to the strategic direction for Platforms in terms of providing clear north star vision for Sasol’s business and technology.
• Work with Enterprise Architects, Senior Solution Architects and technology partners to ensure alignment of IM Platform visions and roadmaps with IM strategy and target Enterprise Architecture and Vendor Management.
• Establish and provide platform maintenance roadmap and business case and ensures that proper knowledge management process and systems are in place for platforms and services.
• Manages the vendor ecosystem and is responsible for the TCO of platforms.
• Ensure Requirements Management, Service Design, Process Design and Solution design for Platform and Services.
• Prepare proposals for optimisation, upgrades, retirement and/or replacement of Platforms.
• Collaborate with Delivery Management to develop DevOps technology strategy and implementation frameworks to align with the different Platform roadmaps.
• Drive buy-in and adoption of platforms enhancements and upgrades. Collaborate with delivery management to ensure that all the solutions and changes adheres to Deployment, Transition & Change Management practices.
• Set Service Continuity, Capacity, Event and Availability Management standards for Platform and Services.
• Set standards for the support & implementation partners for SLA and KPI framework that is aligned with the vision for the Platforms.
• Ensure that all platforms related solutions and changes are tested in accordance with the Quality Assurance & Testing practices and policies.
• Drive adoption and implementation of quality assurance and test automation practices in the platforms and solutions.
• Work with the IT Hardware and Software Asset Management teams to ensure that there is proper inventory management and asset management for all platform assets.
• Collaborate with service providers and other platform managers to ensure configuration management completeness, compliance and correctness.

Formal Education

• University Bachelors Degree

Min Experience

• 6+ relevant years
• Experience in audit, internal control, risk management, IT controls and related standards (COSO)
• Experience in SAP ECC or S4 HANA (MM, SD, SRM, CRM, Logistics etc.)
• SAP GRC 10.0 in all modules, strong knowledge in Process and Access controls advantageous

Professional Membership

• ITIL 4 Foundation. Azure Fundamentals, COBIT 5

Behavioural (BC) |Technical (TC) |Leadership (LC)

• BC_Collaborates
• TC_Document and Model User Requirements
• TC_Policies and Procedures
• BC_Customer Focus
• BC_Manages Complexity
• TC_IM Application Development
• TC_Market Analysis
• BC_Tech Savvy
• TC_Information Management
• BC_Ensures Accountability