SAP GRC Senior Analyst at Sanlam Group

The Finance Shared Services function is responsible for delivering the following services to Sanlam Life and Savings, as well as other Clusters within Sanlam that make use of SAP S/4 Hana and related finance systems

• The execution of shared financial transactions through the Finance Shared Services Centre.
• Drive operational excellence and efficiency through finance process and technology optimisation.
• Delivering an efficient financial control and compliance environment for SAP S/4 Hana and related finance systems.
• Delivering on the consolidated financial reporting requirements for Sanlam Life and Savings.
   

The SAP GRC Senior Analyst role will be responsible for supporting the Head of SAP GRC in managing and delivering an efficient financial control and compliance environment for SAP S/4 HANA and related finance systems, with a focus on centralisation, standardisation, automation, and optimisation of financial control compliance processes. The SAP GRC CoE acts as a second line of defence in support of Business Units’ own financial control and compliance environments.The incumbent will partner with the Head of SAP GRC and Business Unit Heads to promote adherence to agree upon financial control compliance processes. This role will furthermore be to support for the identification and reporting of non-compliance and recommendations on how this can be addressed.

What will make you successful in this role?
GRC Strategy Development

• Support the Head of SAP GRC in the development of the GRC strategy for Finance Shared Services to ensure greater compliance to required standards.
• Support various strategic initiatives ensuring greater compliance and awareness in support of realising the GRC strategy.

Financial Risk and Controls Support

• Act as second line of defence in the design, implementation and management of control processes and documentation by:
• Supporting management in the identification, design and implementation of financial risk and controls through normal business as usual (BAU) operations and transformation initiatives (change in people/process/technology).
• Documenting identified financial risks and controls in a risk and control matrix.
• Defining and maintaining standards used to document financial risks and controls.
• Maintaining the SAP Access Control ruleset to reflect the key access controls identified by business.

Optimisation

• Continue to identify, design and implement optimisation opportunities in the financial control and compliance environment through innovation and automation

Support SAP GRC Solution

• Support the management and delivery of financial controls through SAP Access Control 12 and Process Control 12 applications:
• Maintenance of BRF+ rules in Access Control workflow
• Schedule SOD Review workflows to risk owners
• Maintain User Access review process in SAP Access Control
• Implementing and maintaining the GRC Access Control configuration to support the defined access management processes
• Resolve SAP Access Control Support Incidents
• Setting up of SAP AC batch jobs - Functional
• Document and maintain the risks, controls and control owners in the repository (Process Control)
• Defining and documenting manual control procedure steps
• Regular review of access (UAR) and mitigations against the access risk ruleset (periodic) with root cause analysis
• Following up on escalation workflows for configuration control changes
• Creation/testing of new automated business rules and assignment to controls
• Monitor dashboards by GRC CoE on PC and investigate control exceptions
• Implementing and maintaining the GRC Process Control configuration to support the defined financial control management processes.
• Resolve SAP Process Control Support Incidents
• Setting up of SAP PC batch jobs - Functional
• Managing interaction with Basis Team for SAP PC
• Managing the SDLC (Change management) of SAP PC
• Provide Internal Team Training

Stakeholder Integration

• Support the Head of SAP GRC to operate as liaison between Business Unit management (first line of defence) and key stakeholders that include Internal Audit (3rd line of defence) and External Audit (4th line of defence)

Qualifications
Qualification and Experience

• Bachelor’s degree in risk and compliance management, finance, audit or relevant field from a recognised institution.
• Professionally accredited from a recognised industry body as a Certified Information Systems Auditor (CISA) or a Certified Internal Auditor (CIA) or Chartered Accountant (CA) is an added advantage.
• SAP certification is an added advantage.

Experience

• 5 years of functional experience in Finance or Risk Management.
• 3 years comprehensive experience of internal audit, risk assessments, related methodology and terminology.
• 3 years in-depth knowledge of Risk and Compliance processes and controls.
• 3 years implementation and support experience of SAP Access Control, and SAP Process Control.
• Functional and basic technical understanding of SAP Fiori is an added advantage.
• Functional and basic technical knowledge and understanding of S/4HANA Security is an added advantage.