SAP GRC Architect-Internal Controls

Job summary

Design and architect internal controls for S/4HANA, including automated process controls, segregation-of-duties and access-risk strategies, SOX/ICFR control catalogs, and audit-ready evidence. Partner with finance, audit, security, and project teams to address findings, guide controls-by-design, and strengthen controls standards and training.

Job details

Architect the controls framework — design the internal controls framework for S/4HANA, mapping business-process risks to preventive and detective controls, and defining how those controls are configured, automated, and evidenced within the system. • Own SoD & access-risk strategy — partner with the security/authorization team on rule-set design/optimization, risk analysis, remediation, and mitigating controls. • Automate process controls — define configurable controls embedded in S/4HANA processes (e.g., three-way match, tolerances, approval/release strategies, posting-period and document controls) and replace manual controls with system-enforced ones. • Support SOX / ICFR — design the control catalog, define control objectives and key controls, align with the Risk and Control Matrix (RACM), and produce audit-ready evidence. • Partner with audit & finance — work with internal audit, external audit, and finance to scope controls, respond to findings, and drive remediation to closure. • Design controls in from the start — advise project and functional teams during S/4HANA implementations and enhancements to ensure 'controls by design' rather than retrofitted controls. • Embed a controls culture — develop standards, documentation, and training to strengthen controls and compliance across process and technology teams Mandatory Skills: 10+ years of experience in SAP GRC / internal controls / IT audit, with hands-on architecture experience on S/4HANA (implementation, migration, or transformation). • Strong understanding of internal controls frameworks and SOX/ICFR, including control design, RACM, control testing, and audit evidence. • Solid knowledge of S/4HANA business processes (e.g., Record-to-Report, Procure-to-Pay, Order-to-Cash) and the configurable/application controls within them. • Demonstrated ability to translate risk and compliance requirements into concrete, automated system controls. • Experience working with internal/external auditors and remediating control findings. • Excellent communication skills; able to engage finance, audit, risk, and IT stakeholders with equal fluency.

What you’ll do

Design and architect internal controls for S/4HANA, including automated process controls, segregation-of-duties and access-risk strategies, SOX/ICFR control catalogs, and audit-ready evidence. Partner with finance, audit, security, and project teams to address findings, guide controls-by-design, and strengthen controls standards and training.

Requirements

Requires 10+ years of experience in SAP GRC, internal controls, or IT audit, including hands-on S/4HANA architecture experience in an implementation, migration, or transformation. Candidates should understand SOX/ICFR, RACM, S/4HANA business processes and application controls, and have experience translating risks into automated controls and working with auditors to remediate findings.

Listed skills

• Control · Preferred
• SAP · Preferred
• analysis · Preferred
• Preventive · Preferred
• Teams · Preferred
• Compliance · Preferred
• Process · Preferred
• Documentation · Preferred
• Communication · Preferred
• Audit · Preferred
• Communication Skills · Preferred
• Mapping · Preferred

Other relevant skills

Identified from the job description. Confirm important requirements above.

• SAP GRC
• S/4HANA
• Internal Controls
• SOX/ICFR
• Segregation Of Duties
• Access Risk Management
• Risk And Control Matrix
• Control Design
• Automated Controls
• Control Testing
• Audit Evidence
• Record-To-Report
• Procure-To-Pay
• Order-To-Cash
• Audit Remediation
• Stakeholder Communication

Job areas

• Technology
• Finance & Accounting
• Security & Safety
• Consulting
• Management & Leadership

More jobs from BURGEON IT SERVICES