Subject Matter Expert - SAP Security & GRC - IT

Accountabilities and responsibilities :

Following are the verticals that SME would be responsible for:

- Driving Innovations in SAP Security- Identify new technologies, innovations which will provide business value. Designing to Deployment of Solutions to meet business need

- Vendor management - Managing and building relationships with vendors

- TCO - Drive reduction of TCO for SAP Security and for the GRC application and landscape

- Sustainability & Resilience - Ensure Sustainability and Resilience of Security definitions, decisions and capabilities of the tools used to maintain SAP Security, including GRC

- Driving integration with GRC and SAP security controls compliance

- Build Talent and Teams - Invest in building talent

Driving Innovations :

- Responsible for both smooth project delivery and Business As Usual post capability in the GRC system and any other associated security tools

- Manage delivery of all agreed IT Security-related projects, from Feasibility phase to completion

- Designing solutions to new security needs

Deployment of Solutions to meet business need :

- In the Ideas phase, manage IT and Business Engagement in driving clarity of Security requirements, deliver high level design, cost and time estimates

- Identify and create the right design and solution to meet Security requirements and own the functional specifications and work packages for delivering the solution

- Work in close partnership with vendors and manage on-time and on-budget execution of key projects and programmes

- Work with global teams such as Controls Service Centre (CSC), Group Chief Accountants Department (GCAD) and Business Operations (BO) to recommend, manage and deliver business and controls requirements in relation to Security and GRC

- Ensure smooth transition to support from any project activity with all knowledge captured.

- Develop strong relationships with other key stakeholders within IT

- Identify innovations, growth opportunities for exploration and influence stakeholders to buy in to such opportunities

Vendor Management :

- Engage in functional and technical design reviews (QA process) with strategic IT suppliers and/or other 3rd parties when/where appropriate

- Hold vendors accountable for quality and timeliness of deliveries through governance mechanisms

- Ensure adequate knowledge sharing and retention through documentation and adherence to GPD

Drive TCO :

- Drive simplification to support the lowest possible TCO for all Security activity and projects.

- Deliver above responsibilities within an agreed financial charging structure and budget

- Adopt methodologies of convergence, build once so that the cost of delivery is reduced

Sustainability & Resilience :

- Drive and support the development and maintenance of the roadmap for GRC architecture change/refresh in line with destination architecture and aligned with business priorities for change projects and programmes

- Work with the GRC landscape management team to ensure system hygiene, performance, KEC objectives are delivered

- Work with the release management teams to ensure that the gate process and release process is adhered to

- Work with the AM teams, not only for transition of new projects, but also for support of existing processes to ensure user satisfaction and call reduction

- Plan for infrastructure needs, service introduction and service transition and work with the Enterprise Computing (EC) teams to deliver it

- Ensure minimal business disruption. In case of a disruption, resolve the issue and the root cause with minimum downtime

- Ensure a stable and resilient system - this should be ensured in project delivery & BAU

Driving integration with GRC and SAP security controls compliance :

- Work with lead SME's in other SAP areas to ensure understanding and adoption of Security plans and changes, including GRC for Access Control (AC) at least, and possibly Process Control (PC).

- Support lead SMEs with compliance with SAP Security Baseline Controls in their SAP area

- Ensure agreed changes in Security requirements and GRC are correctly integrated in other functional areas where necessary

- Help ensure Technical and Security standards established are implemented and adhered to during design and implementation of SAP systems.

Build Talent and Teams :

- Help build and retain SME capability