SAP Security GRC Analyst

Information Commissioner's Office

. Design, build and maintain SAP roles, authorisations and access governance controls .

Posted 9/22/2026full-timeLincoln • United KingdomMid-LevelSenior💰 £60,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in SAP Security and Authorisations, particularly within SAP S/4HANA environments, with a strong focus on access governance, risk management, and compliance. Proficient in configuring and maintaining SAP GRC Access Control and workflows while effectively communicating security concepts to diverse audiences.

Highest-signal resume keywords

SAP Security and AuthorisationsSAP GRC Access ControlSegregation of Duties ManagementSAP User Lifecycle ManagementRisk Management Principles

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

SAP S/4HANASAP GRC Access ControlAccess Risk AnalysisRole MaintenanceGRC Workflows ConfigurationSegregation of Duties AnalysisSAP Security GovernanceIT General ControlsABAP Authorisation ChecksManagement Information Reporting

Soft Skills

Analytical SkillsProblem-Solving SkillsCommunication SkillsRelationship Building

Tools & Technologies

SAP GRCSAP ECC SecuritySAP Fiori SecuritySAP BTPEnterprise IAM Platforms

Certifications & Qualifications

SAP Security CertificationSAP GRC Certification

Industry Keywords

Access GovernanceComplianceRisk ManagementCyber SecurityAgile Delivery Methodologies

Tech Stack

Tools & technologies

CloudCyber Security

About the role

Key responsibilities & impact

Design, build and maintain SAP roles, authorisations and access governance controls
Analyse requirements and recommend secure solutions aligned with least privilege and Segregation of Duties principles
Perform SAP access risk analysis and investigate Segregation of Duties conflicts, critical access risks and privileged access requirements
Support and maintain SAP GRC Access Control, including ARA, ARM, BRM and EAM
Support configuration of GRC workflows, routing rules, access risk rulesets and mitigating controls
Support SAP user lifecycle processes for joiners, movers and leavers
Review access requests, role maintenance, provisioning and periodic access reviews
Support internal and external audits and provide evidence of SAP Security and GRC control operation
Execute and monitor SAP IT General Controls and access governance controls
Produce risk, compliance and management information for stakeholders and governance forums
Identify opportunities to improve and automate SAP Security and GRC processes, reporting and controls
Support SAP transformation initiatives and security-related projects
Collaborate with Cyber Security, Enterprise Architecture, SAP teams, Business Role Owners, Business Risk Owners and delivery partners
Contribute to the continued development of SAP Security, Access Governance and GRC capabilities

Requirements

What you’ll need

Demonstrable experience in SAP Security and Authorisations within SAP S/4HANA environments
Experience of SAP GRC Access Control, including ARA, ARM, BRM and EAM
Experience designing and maintaining SAP roles and authorisations
Strong knowledge of SAP Security and Authorisation concepts
Experience analysing and managing Segregation of Duties and critical access risks
Experience configuring and maintaining SAP GRC workflows, rulesets and governance controls
Experience supporting SAP user lifecycle management
Experience supporting SAP audit and compliance activities
Understanding of SAP Security governance frameworks, internal controls and risk management principles
Experience supporting SAP projects, enhancements and change
Strong analytical and problem-solving skills
Ability to communicate complex security and risk concepts clearly to technical and non-technical audiences
Ability to build effective relationships across business and technology teams
Degree-level qualification or equivalent professional experience
SAP Security and/or SAP GRC certifications, SAP ECC Security, SAP Fiori Security, SAP BTP and SAP Cloud Security, IT General Controls, regulated industry experience, Agile delivery methodologies, SAP S/4HANA functional processes, SAP identity integration with enterprise IAM platforms, ABAP authorisation checks, and management information, risk and governance reporting are advantageous

Benefits

Comp & perks

Full private healthcare with no excess
26 days leave, rising with service, plus Bank Holidays
Option to swap Christmas and Easter holidays for those celebrated by your religion
Flexible working culture
Competitive pension scheme – employer double-matches contributions up to 6%
Bonus Scheme
Flexible working from home and from an Anglian Water office