SAP GRC Access Control Sr Analyst
Job Description
At Zimmer Biomet, we believe in pushing the boundaries of innovation and driving our mission forward. As a global medical technology leader for nearly 100 years, a patient’s mobility is enhanced by a Zimmer Biomet product or technology every 8 seconds.
As a Zimmer Biomet team member, you will share in our commitment to providing mobility and renewed life to people around the world. To support our talent team, we focus on development opportunities, robust employee resource groups (ERGs), a flexible working environment, location specific competitive total rewards, wellness incentives and a culture of recognition and performance awards. We are committed to creating an environment where every team member feels included, respected, empowered and recognised.
What You Can Expect
The SAP GRC Access Control Senior Analyst is responsible for the configuration, administration, support, and ongoing improvement of SAP GRC Access Control and SAP IAG Bridge solutions. This role works closely with SAP security, audit, internal controls, and business stakeholders to help maintain appropriate access governance, segregation of duties compliance, and effective security controls across the SAP environment.
The Senior Analyst applies strong functional and technical knowledge of SAP GRC Access Control to support access risk analysis, user provisioning processes, emergency access, and role governance activities. This role contributes to project delivery, audit support, process improvement, and issue resolution, while operating as an experienced individual contributor with growing influence across cross-functional teams.
Work Location: Bangalore
Work Mode: Hybrid (3 Days in office)
Shift Timing - 3:00 PM to 12:00 AM
How You'll Create Impact
• Configure, test, support, and maintain SAP GRC Access Control and SAP IAG Bridge solutions.
• Support the design and maintenance of SAP security roles and access control structures aligned with business and compliance requirements.
• Perform activities across key SAP GRC Access Control capabilities, including Access Risk Analysis and Remediation (ARA), Access Request Management (ARM), Emergency Access Management (EAM), and Business Role Management (BRM).
• Analyze segregation of duties risks, access issues, and control requirements, and assist in developing remediation recommendations.
• Develop and maintain SAP GRC-related procedures, process documentation, and operational standards.
• Support IT SOX compliance activities, audit requests, control testing, and related documentation.
• Participate in projects, enhancements, and system changes affecting SAP access controls and governance processes.
• Gather and analyze business requirements and help translate them into practical security and access control solutions.
• Troubleshoot issues related to SAP GRC configuration, role maintenance, provisioning workflows, and risk rules.
• Collaborate with team members, stakeholders, and external support resources to complete deliverables and resolve issues.
• Share knowledge with peers and provide guidance on SAP GRC processes and best practices when appropriate.
• Identify opportunities to improve process efficiency, data quality, and control effectiveness within the SAP security environment.
What Makes You Stand Out
• Strong experience implementing, configuring, and supporting SAP GRC Access Control, including:
– Access Risk Analysis and Remediation (ARA)
– Access Request Management (ARM)
– Emergency Access Management (EAM)
– Business Role Management (BRM)
• Experience supporting SAP IAG Bridge and related cloud-based identity and access governance capabilities.
• Good knowledge of SAP security architecture, role design, authorization concepts, and implementation practices.
• Strong understanding of segregation of duties concepts, access risk management, and mitigating controls.
• Understanding of user access provisioning, security administration, and access lifecycle processes.
• Ability to evaluate business requirements and support the design of effective, compliant technical solutions.
• Understanding of SAP application security concepts, governance practices, and audit support expectations.
• Strong analytical, problem-solving, organizational, and critical thinking skills.
• Effective written and verbal communication skills, with the ability to work across technical and business teams.
• Ability to manage multiple priorities, work independently, and adapt to changing business needs.
• Team-oriented mindset with a focus on service, quality, and continuous improvement.
• Understanding of Zimmer Biomet’s business environment and compliance expectations preferred.
Your Background
Required:
• 4+ years of relevant experience in SAP GRC Access Control implementation, configuration, administration, and support.
• Access Risk Analysis and Remediation (ARA), Access Request Management (ARM), Emergency Access Management (EAM), and Business Role Management (BRM).
• Experience supporting SAP access control, security operations, compliance, or related governance initiatives.
• Bachelor’s degree in Information Technology, Information Systems, Cybersecurity, or a related field.
Preferred:
• Master’s degree in business, technology, or a related field.
• SAP GRC certification.
• Experience with SAP GRC 12.0 preferred (10.x acceptable if accompanied by relevant experience).
• CISA, CISSP, or similar relevant certification.
Travel Expectations
Up to 10%
EOE/M/F/Vet/Disability