SAP is the most important application within organisation. As a SAP Compliance Manager your job will be to ensure compliance and security of SAP platforms (ECC, BI, SRM…) and to act as a central point of coordination inside Group Information Technology – GIT (with SAP Competency Center and SAP Admin Team) and with Internal Control, Internal Audit, Group Compliance and statutory auditors.

 Main Missions

SoD (Segregation of Duties) Management

• Propose solution to existing conflict
• Improve SoD Risk Matrix
• Propose and implement new mitigating control in SAP environment
• Arbitrate request for SAP authorization role changes (from business & IT) to ensure adherence to policies (naming convention, …) and respect of SoD principles

ACL Management

• Manage the ACL (Data Analyst solution) platform by implementing new script on-demand (ad hoc or on regular basis)
• Ensure scripts are respecting functional specification and meet requirements.
• Working on visualization forms
• Animate a customer network with Control Factory (GBS, controllers, GIA, …)
• Perform ad hoc SAP data extraction when required by internal & external parties (yearly extraction for auditors, FEC extraction for French Tax Control, …)

SAP Risk & Compliance admin

• Act as a single point of contact for Risk & Compliance for all SAP related audits for internal & external auditors.
• Manage procedures and policies to ensure compliance of SAP environment toward internal & external requirements (audits, laws & regulation…)
• Manage SAP license topic and ensure compliance with SAP requirements
• Manage various SAP related project (new modules, …)

Risk vulnerabilities

• Identify and analyze risk & vulnerabilities related to SAP environment (application DB & OS level)
• Perform risk assessment with GIT CyberSecurity team and external party if required
  
  Technical Skills

• Good SAP background including knowledge of SAP Authorization
• Good knowledge of SAP Data Model (main business tables) and SAP Security principles
• Good knowledge of SoD concepts and experience in SAP GRC Access Control
• Experience in using the main SAP modules and data analytics tools, including data extraction and analysis.
• Previous experience in ACL (or equivalent) data analysis solution and ability to create or improve existing scripts
• Previous experience in consulting or auditing firm would be a plus

Behavioral skills

• Fluency in English mandatory
• Strong communication skills including technical and business writing, documentation and presentation skills.
• Excellent verbal and written communication skills required. Must be able to:
  effectively communicate and interact with multiple levels of management.
• Strong coaching and leadership skills necessary and ability to work in a team and multi-cultural environment.