GRC & Controls Lead for SAP Transformation

  • Amorsa Ltd.
  • 18/05/2026
Contractor Information Technology Telecommunications

Job Description

The Governance Risk & Controls Lead will be responsible for defining, implementing, and governing the Governance, Risk, and Compliance (GRC) framework across a large-scale SAP transformation programme, typically involving SAP S/4HANA. The role will ensure that internal controls, security, regulatory compliance, audit requirements, and risk management principles are Embedded throughout the end-to-end transformation life cycle.

The successful candidate will work closely with programme leadership, SAP functional teams, security architects, internal audit, and business stakeholders to deliver a compliant, secure, and audit-ready SAP environment. The GRC & Controls Lead will be responsible for defining, implementing, and governing the Governance, Risk, and Compliance (GRC) framework across a large-scale SAP transformation programme.

Key Responsibilities

The role will ensure that internal controls, security, regulatory compliance, audit requirements, and risk management principles are Embedded throughout the end-to-end transformation life cycle. The successful candidate will work closely with programme leadership, SAP functional teams, security architects, internal audit, and business stakeholders to deliver a compliant, secure, and audit-ready SAP environment.

Governance & Controls Framework
Business Transformation & Change Enablement
Compliance & Regulatory Assurance & Risk Management
Stakeholder Management

Experience

The SAP transformation programme will form part of a wider business transformation initiative focused on fundamentally changing systems, processes, people, and technology across the organisation or business unit in order to achieve measurable improvements in operational efficiency, effectiveness, governance, and stakeholder satisfaction. As such, the role will support multiple interconnected change initiatives across business processes, technology platforms, operating models, and functional teams.

Extensive experience delivering GRC and controls activities within SAP transformation programmes.

Strong knowledge of SAP S/4HANA environments.

Proven experience with:

    • SAP GRC Access Control
    • SAP Security & Authorisations
    • Segregation of Duties (SoD)
    • IT General Controls (ITGCs)
    • SOX compliance
    • Enterprise business transformation initiatives

Industry experience in:

    • Legal Sector
    • Public sector
    • Consulting