Manager - SAP Security & GRC

Overview

Lead the SAP Security and GRC team within the Business Application Risk Solutions practice, delivering SAP Security, GRC and controls engagements for clients and supporting practice growth and capability development across the U.S. and India.

What you'll do

• Lead end-to-end SAP Security and GRC engagements across implementation, transformation, assessment, optimization, controls transformation, and managed services programs.
• Manage SAP Security and controls workstreams in SAP ECC and SAP S/4HANA environments, including requirements gathering, solution design, role build, testing, deployment, cutover, hypercare, and post-go-live support.
• Lead SAP Security design and access governance activities, including role design, role redesign, authorization troubleshooting, Fiori authorizations, SoD analysis, sensitive access reviews, emergency access management, user access reviews, and access remediation.
• Lead SAP GRC Access Control implementation and enhancement activities across ARA, ARM, EAM, BRM, MSMP workflows, BRF+, ruleset design, risk analysis, mitigation controls, connectors, synchronization jobs, and related GRC configuration activities.
• Support SAP GRC Process Control initiatives, including control framework mapping, risk and control configuration, automated monitoring, business rules, data sources, control testing, and continuous controls monitoring.
• Translate business process, compliance, audit, and internal control requirements into practical SAP Security and GRC solutions aligned with client risk and regulatory requirements.
• Advise clients on SAP Security and access governance considerations across integrated SAP landscapes, including Fiori, HANA, BW/BI, BTP, Ariba, IBP, MDG, SuccessFactors, and other SAP applications, as applicable.
• Manage client stakeholders, engagement plans, project timelines, issue resolution, deliverable quality, and team performance across multiple concurrent engagements.
• Lead, groom, and mentor SAP Security and GRC team members through technical guidance, quality reviews, coaching, training, and structured capability development.
• Identify talent, hire, mentor, coach, and ensure the continuous professional development of staff is being met.
• Develop reusable methodologies, solution accelerators, delivery templates, training materials, knowledge repositories, and other practice assets to support consistent and scalable delivery.
• Contribute to business development activities, including opportunity qualification, proposal development, solution design, effort estimation, client presentations, and practice credentials.
• Work collaboratively with automation, analytics, business process, application controls, and risk advisory specialists to address client ERP risk management needs in a holistic manner.
• Maintain awareness of emerging SAP technologies, including SAP Joule, SAP BTP, SAP IAG, SAP Cloud Identity Services, automation, analytics, and AI-enabled risk and controls solutions.
• Support execution of the practice growth strategy by contributing to internal initiatives related to talent development, methodology enhancement, market offerings, and capability scaling.
• Ensure engagement documentation, deliverables, and work products are compliant with firm quality standards and demonstrate sound professional judgment.
• Work with a team to provide services to numerous clients simultaneously.
• Communicate effectively with RSM consulting professionals, supervisors, and senior management in the U.S. on a daily basis.

What you'll need

• Bachelor's or master's degree in Engineering, Technology, Information Systems, Business, Finance, or a related discipline.
• Minimum 10+ years of professional experience in SAP Security, SAP GRC, IT controls, risk advisory, technology consulting, managed services, or a related compliance domain.
• Deep expertise in SAP Security across SAP ECC and SAP S/4HANA, including authorization concepts, role design, authorization object analysis, access troubleshooting, Fiori authorizations, and access remediation.
• Strong hands-on experience with SAP GRC Access Control, including ARA, ARM, EAM, BRM, MSMP workflows, BRF+, connectors, synchronization jobs, ruleset maintenance, risk analysis, and mitigation controls.
• Practical experience with SAP GRC Process Control, including control design, automated monitoring, business rules, data sources, control testing, and continuous controls monitoring.
• Strong understanding of internal controls, SOX compliance, segregation of duties, sensitive access, user access management, IT application controls, and audit support requirements.
• Experience leading complex SAP Security and GRC engagements across implementation, transformation, assessment, optimization, controls, and managed services programs.
• Experience managing delivery teams, reviewing work products, mentoring resources, and building technical capability within SAP Security and GRC teams.
• Ability to support business development through proposal support, solutioning, effort estimation, client discussions, practice credentials, and development of reusable assets.
• Strong project management, stakeholder management, communication, analytical thinking, problem-solving, and leadership skills.
• Ability to identify talent, groom resources, support structured capability development, and contribute to scaling the SAP Security and GRC practice.
• Demonstrated ability to work in high-pressure client delivery environments while managing competing priorities and maintaining quality standards.
• Excellent verbal, written, and interpersonal communication skills in English, as the position requires frequent communication with RSM International clients.

Nice to have

• Prior experience with a public accounting firm, large consulting organization, or global delivery environment.
• Exposure to other GRC, identity governance, access management, compliance, control monitoring, or risk management tools.
• Exposure to SAP Joule, SAP BTP, SAP IAG, SAP Cloud Identity Services, automation, analytics, AI-enabled controls, and emerging SAP technologies.
• Experience with SAP HANA, BW/BI, Ariba, IBP, MDG, SuccessFactors, BDC, SAC, or other SAP public cloud and integrated applications.
• Experience with SOX, COSO, COBIT, ISO, NIST, HIPAA, FDA, and other IT controls methodologies and frameworks.
• Relevant certifications such as SAP Security, SAP GRC, CISA, CRISC, CISSP, CISM, or equivalent certifications.

Details

• Location: Gurugram.
• Reports to the U.S. BARS Director, with a dotted-line relationship to the U.S. BARS Practice Leader and India BARS Practice Leader.
• Flexibility in schedule offered; the role requires work across an extended business day to support U.S. engagement teams.