ACCESS CONTROL & AUTHORISATIONS SPECIALIST

The successful candidate will report to the IT Risk and Compliance Manager.

Purpose of the position:
This position supports the IT Risk and Compliance function and is responsible to define and maintain authorisations models\structures to support user identity management and access control across key IT systems globally.

Key performance areas include (but are not limited to):

• Leading the end to end SAP GRC project technical implementation;
• Acting as an advisor\subject matter expert on SAP GRC rule set development and maintenance;
• Developing and maintaining GRC related policies \ procedures \ configurations to limit and control IT access in the SAP production environment (e.g. through the configuration of Firefighter functionality);
• Achieved the general governance objectives in support of IT strategies;
• Liaising between technical and functional teams (including the Internal Audit function) relating to system security configurations, parameters, segregation of duties, and high risk role identification;
• Participating in corporate and industry interest groups that focus on Security and Audit;
• Responsible to track, analyse, and report the impact of changes/trends in the GRC and Security areas;
• End-users support and training.

The successful candidate should preferably have the following experience, skills and qualifications:

• Must have the relevant authorisations certification, GRC certification and CISA, CRISC or equivalent Certification;
• Exposure to governance models\frameworks (such as CobiT, ITIL SixSigma etc.);
• At least 5 - 8 years relevant work experience which includes GRC implementation and maintenance;
• Fully computer literate in SAP and MS Office (advanced Excel skills);
• Good communication skills, both verbally and written;
• Established relationships with internal business functions and key customers;
• Ability to work independently and under pressure;
• Must be innovative and self-driven;
• Attention to detail and analytical abilities are essential.

Candidates who do not receive any correspondence within 1 month after the closing date may assume that their applications were unsuccessful and are hereby thanked for applying.