Postbank is a bank by South Africans for South Africans and like all the other renowned commercial banks in the South African market, Postbank is all about serving the South African citizens and creating lasting value. The Bank’s core function is to provide cost-effective financial services to South Africans. It views itself as a banking and financial ser...
To manage Postbank security, enforce compliance policies, and mitigate financial or operational risks within SAP environment. The role is responsible for configuring SAP GRC (Governance, Risk, and Compliance) Access Control and Process Control modules, conducting Segregation of Duties (SoD) analyses, and streamlining internal audit processes to ensure effective governance, risk management, and compliance.
Job Responsibilities:
To manage Postbank security, enforce compliance policies, and mitigate financial or operational risks within SAP environment.
Administer and maintain SAP user access and authorization roles.
Design, configure, and maintain SAP roles and profiles in line with business requirements.
Ensure compliance with the principle of least privilege and role-based access controls.
Manage user provisioning, deprovisioning, and access reviews.
Work closely with business process owners, auditors, SAP functional teams, and IT security teams.
Provide guidance on security and compliance requirements during projects and system changes.
Support SAP implementation, upgrade, and enhancement projects from a GRC perspective.
Administer Firefighter IDs and Emergency Access Management (EAM).
Review emergency access logs and investigate exceptions.
Ensure appropriate approvals and monitoring of privileged access.
Configure and support SAP GRC Access Control and Process Control solutions.
Perform Segregation of Duties (SoD) risk analysis and remediation.
Monitor and mitigate access and compliance risks across SAP systems.
Develop and maintain risk and control matrices.
Plan and execute unit, integration, and system testing to ensure high-quality, stable solutions
Generate compliance, risk, and access management reports.
Monitor security violations and unauthorised access attempts.
Develop dashboards and metrics for management reporting.
Support internal and external audits by providing evidence and reports.
Conduct periodic user access reviews and certification campaigns.
Ensure compliance with regulatory requirements, corporate policies, and industry standards.
Monitor control effectiveness and recommend improvements.
Qualification:
Bachelor’s degree in computer science, Information Technology, or related field (NQF Level 7)
SAP ECC Certification (Access Control or Security).
Experience:
Minimum 8 years of experience in IT
Minimum 5 years of experience as an SAP GRC (Authorisation)
Minimum 5 years of experience with SAP ECC & S/4HANA Implementation & Support
Minimum 3 years of experience with cloud platforms (SAP Cloud, AWS & Azure)
Minimum 3 years of experience in banking or financial services
Knowledge of SAP and SAP security concepts.
Understanding of Segregation of Duties (SoD) risk analysis and mitigation.
Experience with SAP user administration and role design.
Skills:
Knowledge of risk management, governance, and compliance frameworks.
Strong analytical and problem-solving skills.
Excellent written and verbal communication skills.
Attributes:
High level of integrity and professionalism.
Strong attention to detail and accuracy.
Critical thinker with good decision-making ability.
Ability to work under pressure and meet deadlines.
20 Initiatives to Boost Employee EngagementAre you struggling with improving employee engagement at work? This article covers everything from better communication to building a strong workplace culture.
30 Common Interview Mistakes to AvoidThis piece examines 30 of the most common mistakes applicants make at interviews, so you know how to better avoid them.