SAP Onsite GRC Consultant

Infosys Pontoon•Indianapolis, IN

2d•Hybrid

About The Position

The SAP GRC Consultant will lead or support an onsite SAP GRC upgrade covering Access Control and Process Control, as well as refine Process Control business rules. The role includes planning and executing the upgrade, coordinating system readiness with SAP Basis, assessing the impact on configurations and integrations, validating functionality after the upgrade, resolving defects, and preparing upgrade and go-live documentation. The consultant will also review and improve existing business rules, collaborate with Business Process Owners and Internal Audit, design and test rules, optimize control mappings, review rule performance, and maintain rule-change documentation for audit traceability. The position is a six-month contract. The stated work locations are Indianapolis, Indiana, or another Infosys office; the posting describes the work arrangement as hybrid. The target start date is immediate.

Requirements

10 years of total experience.
8 years of relevant experience.
Mandatory skill: SAP GRC Access Controls and Process Controls.
Ability to work in a large SAP landscape.
Strong hands-on experience with SAP GRC Access Control and Process Control design, configuration, and support.
Proven experience leading or participating in at least one SAP GRC upgrade.
Deep understanding of Process Control business rules, control objectives, data sources, and continuous monitoring.

Responsibilities

Lead end-to-end planning and execution of the SAP GRC Access Control and Process Control upgrade, including sizing, pre-upgrade checks, and post-upgrade validation.
Coordinate with the SAP Basis team on system landscape readiness, patching, and downtime planning.
Assess upgrade impacts on existing configurations, custom rules, workflows, and integrations.
Validate Access Control functionality, including ARA, ARM, and EAM, and Process Control functionality after the upgrade.
Own triage and resolution of upgrade-related defects, working with SAP OSS or vendor support as needed.
Prepare upgrade documentation, rollback plans, and go-live readiness checklists.
Review, analyze, and refine Process Control business rules to improve accuracy, reduce false positives, and reflect current business processes.
Partner with Business Process Owners and Internal Audit to identify gaps or outdated rule logic.
Design, build, and test new or modified business rules, including data sources, rule scripts, and automated monitoring logic.
Optimize control objectives, control frameworks, and control-to-rule mapping for continuous monitoring.
Conduct periodic rule performance reviews and recommend tuning based on exception trends and audit feedback.
Support rule versioning and change management, and document rule logic for audit traceability.