IS SME for SAP GRC

At ABB, we help industries run leaner and cleaner—and every person here makes that happen. You’ll be empowered to lead, supported to grow, and proud of the impact we create together. Join us and help run what runs the world.

This Position reports to:

IS Service Owner - ERP GRC & compliance

Your role and responsibilities (Mandatory)

In this role, you will have the opportunity to own and drive SAP Security, Governance, Risk and Compliance (GRC), and Identity & Access Management solution architecture across ABB's SAP landscape, ensuring alignment with enterprise security standards and compliance requirements.

You will be responsible for the design, implementation, governance, and continuous improvement of SAP authorization and access control frameworks across SAP S/4HANA, Fiori, SAP GRC, SAP Cloud Identity Access Governance (IAG), SAP BTP User Access Management (UAM), and SAP Cloud ALM environments.

You will provide expert guidance on security architecture, role design, segregation of duties (SoD), privileged access management, and compliance controls, supporting both project and operational teams in the deployment of new SAP solutions and the enhancement of existing services. You will also collaborate closely with business stakeholders, IT teams, and external partners to ensure secure, compliant, and efficient access management processes across the SAP ecosystem.

The work model for the role is: Hybrid

This role is contributing to the IS Business Function

You will be mainly accountable for:

• Own the GRC Landscape and SAP Security solutions across SAP S/4HANA, SAP Fiori, SAP BTP, SAP Cloud ALM (CALM), and SAP Identity Access Governance (IAG), ensuring compliance with ABB security and audit requirements.

• Lead the design, implementation, and continuous improvement of role-based access control, authorization concepts, and Segregation of Duties (SoD) frameworks across SAP platforms.

• Manage end-to-end SAP authorization processes, including role design, role maintenance, user provisioning, emergency access management, access reviews, and risk remediation.