SAP GRC Jobs

[Former Member]

Hi All,

I am a SAP FI consultant and have been part of an end to end implementation project of SAP GRC Access Control , . I am involved as a Functional consultant and have to do a "hands on" on the configuration of Fire Fighter , RAR and RT as well. I would like to know what is the future scope for such a combination of Functional and not so technical person ( Techno- functional) in SAP GRC in the coming years.

Look forward to hear views from the Gurus and Seniors in the SAP GRC community.

Thanks & regards,

AJAY

[Former Member]

Hi Ajay,

Even i come from an FI background and now in GRC. I have gained a lot professionally after making this switch. In fact I feel as if I have graduated from core R/3 FI to GRC as I have been exposed to internal controls and process controls. Because of my business process knowledge and FI technical skills, I am able to set the appropriate mitigation controls to monitor risks and exceptions.

I am slo now moving into Process Control where again my FI skills will be in use. Ofcourse i underwent lot of Basis, Security, HR Security, IDM and SOX materials and projects for improving my GRC skills. I am now a technofunctional.

Regards,

Chetna.

[Former Member]

Dear Ajay,

Having knowledge of FI as a functional consultant is an advantage for a GRC consultant but FI consultancy and SAP GRC consultancy are two wide independent domains however you have an advantage for sure.

I think to become SAP GRC Specialist as a whole you need to be a techno functional personality, this is my personal view. Why am I saying this is because you need to first understand the R/3 - Netweaver Architecture because when you are designing the security infrastructure for your client you should have an understanding of their system's landscape and numerous other things.

SAP GRC is not just about PC, ERM, AC and integration between them but it's also about SAP Security and Authorizations, you should have Understanding of Netweaver Security, and knowledge of BI/BW security and IDM integration is a great advantage. At times you have to work closely with DBAs and Basis consultants So you should have understanding of what can be done and how can something be achieved rather seeking help all the time. You also need to know the backup systems, transport system, database systems, compatibility, legacy system connectivity, good understanding of workflows, master user source integration, and majorly Greenlight adapters. According to me if you donu2019t have such knowledge you are in-complete. When you come across some performance optimization issues then your job is not just to check SAP notes and implement step by step as directed but your task is to digg into the problem and come up with innovative ideas technical and concrete enough to be implemented.

Not every thing has a written solution; you will come across many such problems when you need to rely on technical people. In your case if you are good in FI then you should also be aware of SOD risks associated, So you can manage the same using GRC automation Solutions. So GRC experts do need help from functional people but if they are good in at least one functional module it would be easy for them to understand the SOD implications of other modules. Similarly you need help of basis consultants in your day to day job but if you are technical enough you surely have an advantage over other GRCians.

We being GRC experts have many responsibilities, We have to be Techno Functional personalities to provide the best and quality solutions.

Always remember anyone can implement GRC but what matters is, How efficiently it is implemented.

Thanks & Regards,

Amol Bharti

[Former Member]

Dear Ajay,

Visit the blod on [Are BPX Skills Relevant to SAP Professionals? Questions and Answers|https://www.sdn.sap.com/irj/scn/weblogs?blog=/pub/wlg/12334] [original link is broken] [original link is broken] [original link is broken];.

You may already be familiar with authorization management. You may also want to learn about workflow and background jobs. Other activities such as installation, connecting backend systems, and other basis related activities are carried out by basis administrator.

The future of consultants with RAR, SPM, CUP, and ERM experience is very bright.

Regards,

Naveen

[Former Member]

Hi Naveen,

Thanks for you quick response. What is bothering me is that I have been able to be part of GRC with lot of effort and have neglected very good FI projects and have already spent more than 4 months on the GRC Access Control implementation. As you mentioned by you the future is very bright, Just wanted to clarify when you made this remark , was this made for the people from technical background or functional consultants like me can also make their carreers in GRC ?

At this point of time I have to actually choose between FI and GRC , with my personal inclination is more towards the GRC, this is the reason I am looking for views from the forum.

Regards,

Ajay

[Former Member]

Dear Ajay,

You dont need to have technical coding (or debugging) knowledge for GRC. You may want to learn about workflow, background jobs, RFC connections etc.

Regards,

Naveen

[Former Member]

Hi Naveen ,

Thanks for you input.

Regards,

Ajay k Dua

Edited by: AJAY K DUA on Dec 16, 2008 5:35 PM

[Former Member]

Hi Naveen,

Thanks for your input.

Talking of Work Flows, can you guide me if these are the workflows as in R3 or are these different Workflows and from where can I acquire knowledge on the same?

Thanks & Regards,

AJAY K DUA

[Former Member]

Dear Ajay,

Visit [Process Control 2.5 Workflow Customizing|https://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/1011532a-3d6c-2b10-9781-f25d0837a5c3]

[How to Configure and Trouble Shoot Workflow for Process Control 2.5|https://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/10aa2357-ed7f-2b10-7d94-fb404e923e90]

Regards,

Naveen