SAP GRC Consultant

DXC Technology is a Fortune 500 Global IT Services Leader with over 130,000 people in 70+ countries. We deliver mission critical IT services and transform global businesses through technology. Job overview The SAP GRC Consultant will design, implement, and support SAP Governance, Risk, and Compliance (GRC) solutions to strengthen internal controls, risk management, user access governance, and compliance reporting. The consultant will collaborate with security, audit, and business stakeholders to ensure regulatory adherence (SOX, IFRS, ISO, local compliance) and alignment with enterprise risk management frameworks. Responsibilities Conduct requirement gathering workshops with Audit, Risk, Compliance, and IT Security teams. Configure and support GRC Access Control, Process Control, Risk Management, and Audit Management modules. Perform SoD analysis, remediation, and mitigating control design. Implement workflow automation for user provisioning and access approvals. Support business role design and access governance. Enable continuous monitoring of controls and risks in SAP and non-SAP environments. Provide expertise during internal and external audits. Deliver end-user and key-user training on SAP GRC functionalities. Work closely with Basis and Security teams to ensure compliance with corporate IT policies. Support cutover, hypercare, and ongoing compliance operations. Mandatory Skills and Qualifications Education & Certifications Bachelor's degree in Information Systems, Computer Science, Finance, or related field. SAP GRC Certification (preferred). CISA, CISM, CRISC, or similar audit/security certifications (advantage). Experience 5-8 years in SAP Security & Compliance, with minimum 3 years in SAP GRC. Hands-on implementation/support in Access Control + at least one of PC/RM/AM. Experience with SoD rule set customization and remediation. Exposure to compliance frameworks like SOX, GDPR, ISO 27001, NCA/NCA ECC. Technical Skills Strong knowledge of SAP authorization concepts (roles, profiles, SUIM, SU24, PFCG). Expertise in GRC workflow, BRF+, MSMP configuration. Understanding of connector setup between GRC and SAP systems. Familiarity with audit and risk management best practices. Soft Skills Strong analytical and problem-solving skills. Excellent communication for engaging business, audit, and IT teams. GRC Areas of Expertise SAP GRC Access Control (AC): UAR, EAM/Firefighter, ARA, BRM SAP GRC Process Control (PC): control design, monitoring, testing SAP Audit Management (AM): planning, execution, risk integration, audit reporting Integration: SAP GRC with SAP S/4HANA security concepts; interfaces with IDM/LDAP/AD; SoD frameworks Languages English (listing language is assumed in job postings) What awaits you at DXC Health Insurance (HMO) for you and dependents upon hiring Life Insurance coverage from day 1 of employment 15–20 days vacation and 15 days sick leave Expanded maternity leave up to 120 days; maternity benefits Expanded paternity leave up to 30 days Non-Taxable Allowance (De-minimis) Company-sponsored trainings, upskilling, and certification SMART First Working Arrangements Healthy and encouraging work environment Recognition and pay-for-performance culture Supplemental pay (standby/shift) Retirement program Employee Assistance Program Equal Employment Opportunity We are DXC. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or protected veteran status. Job details Seniority level: Mid-Senior level Employment type: Full-time Job function: Information Technology Industries: IT Services and IT Consulting Location notes: Makati/Manila area, Philippines (referrals and postings may appear in multiple nearby locations). #J-18808-Ljbffr