SAP GRC with S/4HANA Internal Controls Experience

Job Title: SAP GRC S/4HANA Internal Controls consultant

Location: Canada_ Hybrid

Domain (Industry): Retail

Total Experience: 10+ Years

Relevant Experience: 10+ Years

Job Description / Roles and Responsibilities

· Architect the controls framework - design the internal controls framework for S/4HANA, mapping business-process risks to preventive and detective controls, and defining how those controls are configured, automated, and evidenced within the system.

· Own SoD & access-risk strategy - partner with the security/authorization team on rule-set design/optimization, risk analysis, remediation, and mitigating controls.

· Automate process controls - define configurable controls embedded in S/4HANA processes (e.g., three-way match, tolerances, approval/release strategies, posting-period and document controls) and replace manual controls with system-enforced ones.

· Support SOX / ICFR - design the control catalog, define control objectives and key controls, align with the Risk and Control Matrix (RACM), and produce audit-ready evidence.

· Partner with audit & finance - work with internal audit, external audit, and finance to scope controls, respond to findings, and drive remediation to closure.

· Design controls in from the start - advise project and functional teams during S/4HANA implementations and enhancements to ensure 'controls by design' rather than retrofitted controls.

· Embed a controls culture - develop standards, documentation, and training to strengthen controls and compliance across process and technology teams.

Mandatory Skills

· 10+ years of experience in SAP GRC / internal controls / IT audit, with hands-on architecture experience on S/4HANA (implementation, migration, or transformation).

· Strong understanding of internal controls frameworks and SOX/ICFR, including control design, RACM, control testing, and audit evidence.

· Solid knowledge of S/4HANA business processes (e.g., Record-to-Report, Procure-to-Pay, Order-to-Cash) and the configurable/application controls within them.

· Demonstrated ability to translate risk and compliance requirements into concrete, automated system controls.

· Experience working with internal/external auditors and remediating control findings.

· Excellent communication skills; able to engage finance, audit, risk, and IT stakeholders with equal fluency.

Desired Skills

· SAP GRC Access Control

· SAP GRC Process Control