SAP GRC/Security Senior Consultant
职位标题:SAP GRC/Security 高级顾问公司:关键咨询地点:美国 (考虑在任何美国地方完全授权工作的候选人 - 需要赞助的人将不会被考虑)关于关键咨询关键咨询是一个领先的咨询和实施组织,拥有风险管理,治理以及合规与安全方面的深入专业知识。具有提供结合技术,流程和人员的端到端解决方案的能力。我们的业务始于 SAP 生态系统,但扩大到无神论合作伙伴,现在为我们提供了更广泛的解决方案来支持客户,同时确保他们的财产。关键咨询帮助企业优化风险管理,安全和合规计划,保护免受网络威胁,降低成本并提高运营效率。通过经验丰富的风险专业人员团队和卓越承诺,我们赋予企业积极保护其重要资产并保持不断发展的威胁前进。工作总结 申请人将在处理客户的参与方面发挥关键作用,并利用强大的技术经验来找到最适合客户需求的解决方案。我们正在寻找一个团队合作伙伴和强大的全方位人士,至少有2项实施和2年的实践经验在以下领域 · 在以下几个领域中详细了解 SAP 授权概念:ECC,SAP S/4 HANA,HCM,CRM,SRM,BW,BI,BPC,SAP HANA,SAP BTP ·设计,构建和实现 SAP 安全和授权解决方案 · SAP 设计,配置和执行 SAP 角色重塑专为 S4 HANA 和 Fiori 的经验 · SAP 规划,配置和实施 SAP 重新设计 ·接触各种系统用户界面 (UI),包括 SAP,但也其他相关的 SaaS 产品 ·详细了解 SAP GRC 应用程序套件,具有可证明的核心模块专业知识 (理想情况下是12后)·经验 IDM 解决方案,无论是 SAPs IDM 解决方案还是非 SAP,如 SailPoint 或 Saviynt 将会带来优势。· SAP BIS 实施和/或管理的经验将会带来的优势。•对第三方解决方案的经验以确保 SAP 财产也是一个优势。
查看英文原文
Job Title: SAP GRC/Security Senior Consultant
Company: Turnkey Consulting
Location:United States (Considering candidates in any US location that are fully authorized to work in the US - Applicants needing sponsorship will NOT be considered)
About Turnkey Consulting
Turnkey Consulting is a leading advisory and implementation organization with deep expertise in risk management, governance, and compliance & security. Having the ability to provide end-to-end solutions that integrate technology, process, and people. Our business started within the SAP ecosystem, however expansion into being an agnostic partner, now gives us a wider range of solutions to support our customers, while securing their wider estate. Turnkey Consulting helps businesses optimize their risk management, security and compliance programs, protect against Cyber threats, reduce costs, and improve their operational efficiency. With a team of seasoned risk professionals and a commitment to excellence, we empower businesses to proactively protect their critical assets and stay ahead of evolving threats.
Job Summary
The candidate will play a key role in handling client engagements, as well as utilizing strong technical experience to find solutions that best fit our clients’ needs. We are looking for a team-player and strong all-rounder with at least 2 implementations and 2 years of practical experience in the following areas
- Detailed understanding of the SAP authorization concept in one or more of the following areas: ECC, SAP S/4 HANA, HCM, CRM, SRM, BW, BI, BPC, SAP HANA, SAP BTP
- Experience of designing, building and implementing SAP security and authorization solutions
- Experience in SAP designing, configuring, and implementing SAP role re-designs specifically for S4 HANA and Fiori
- Exposure to various system user interfaces (UI), including SAP but also other relevant SaaS products
- Detailed understanding of SAP GRC suite of applications, with a demonstrable specialism in core modules contained within (ideally v12 onward)
- Experience of IDM solutions, either SAP’s IDM solution, or non-SAP, such as SailPoint or Saviynt would be of advantage.
- Experience in implementation and/or administration of SAP BIS would be an advantage
- Experience of third-party solutions to secure SAP estates also an advantage
- Experience of SAP Fiori catalogs, groups, pages and spaces
- Experience of SAP IAG solutions would be an advantage, both IAS and IPS
- Experience with scripting languages such as Python and JSON would be an advantage
Our experienced consultants are a key driver of our success as one of the most trusted names in the end-to-end security arena and we are committed to delivering to a consistently high standard. Key responsibilities of the role are:
- Task management of large / complex implementations, especially in aApplication security or enterprise risk/identity projects
- Implementation of GRC technology and supporting modules
- Work with clients to understand "why" they're in need of such solutions, define requirements and configure solutions to best fit those needs
- Perform controls and configuration reviews involving relevant application systems and processes
- Advise clients on controls in their enterprise systems relating to regulatory or legislative compliance
- Review and advise on security redesign and remediation projects
- Provide a broader range of information risk management solutions to clients as required
- Build relationships with new clients and maintain good relations with our existing client base
- Integrate solutions into wider cybersecurity controls estates
We are looking ideally for someone with the following attributes:
- The ability to troubleshoot and diagnose problems / issues and provide prompt, robust resolution
- An enquiring mind to discover "why" clients need to introduce theintroduce controlling measures.
- The ability to manage projects within varied client engagements and lead reviews and implementations
- Knowledge of corporate business processes and their control points
- Good understanding of various IT regulations and standards, including:including Sarbanes Oxley, COBIT, ISO series & the GDPR
- Bachelor’s degree
- Professional certification (e.g. CISA, M.Inst.ISP, CISSP, ISO)
- SAP certification (Security, GRC)
- Consulting background
- Strong written and verbal communication skills
- Integration experience
- Ability to act as an SME to install, design, engineer and configure security solutions to meet client needs
- Ability to effectively manage own time and priorities effectively and to work both as part of a team and individually.
- Able to communicate technical and functional requirements to both the business and IT
Key responsibilities of the role will include:
- Project manage large / complex SAP Security implementations, especially for S/4 HANA projects
- Implementation of GRC Access Controls and supporting modules
- Work with clients to understand requirements and configure solutions to best fit those needs
- Perform controls and configuration reviews involving SAP systems
- Advise clients on controls in SAP relating to regulatory or legislative compliance
- Review and advise on SAP security redesign and remediation projects
- Provide a broader range of information risk management solutions to clients as required
- Build relationships with new clients and maintain good relations with our existing client base
- Integrate solutions into wider cybersecurity controls estates
We are an Equal Opportunity Employer and do not discriminate against any employee or applicant for employment because of race, color, sex, age, national origin, religion, sexual orientation, gender identity and/or expression, status as a veteran, and basis of disability or any other federal, state or local protected class. When we collect your personal information as part of a job application or offer of employment, we do so in accordance with industry standards and best practices and in compliance with applicable privacy laws.
Originally posted on Himalayas