SAP Internal Financial Controls Senior Analyst Ref:

The SAP Internal Financial Controls (IFC) Senior Analyst role will be responsible for supporting the Head of SAP Internal Financial Controls in managing and delivering an efficient financial control environment for SAP S/4 HANA and related finance systems, with a focus on centralisation, standardisation, automation, and optimisation of financial control processes.

The GRC CoE acts as a second line of defence in support of Business Units’ own financial control environments.

The incumbent will partner with the Head of GRC and Business Unit Heads to promote adherence to agree upon financial control processes. This role will furthermore be to support for the identification and reporting of deficiencies and recommendations on how this can be addressed.

The key performance areas of this role include the following:
**GRC Strategy Development for SLS**
- Support the Head of SAP GRC in the development of the IFC strategy for SLS to ensure greater compliance to required standards.
- Support various strategic initiatives ensuring greater compliance and awareness in support of realising the IFC strategy.

**Financial Risk and Controls Support**
- Act as second line of defence in the design, implementation and management of control processes and documentation? by:

- Supporting management in the identification, design and implementation of financial risk and controls through normal business as usual (BAU) operations and transformation initiatives (change in people/process/technology).
- Documenting identified financial risks and controls in a risk and control matrix.
- Defining and maintaining standards used to document financial risks and controls.
- Assist control owners and control performers in business and IT with walkthroughs of controls
- Maintaining the SAP Access Control ruleset to reflect the key access controls identified by business.

**Optimisation**
- Continue to identify, design and implement optimisation opportunities in the financial control environment through innovation and automation.

**Support SAP GRC Solution**:

- Schedule SOD Review workflows to risk owners
- Maintain User Access review process in SAP Access Control
- Maintenance of Access Control custom ruleset at conceptual and permission/action level
- Run and interpret Access Risk Analysis reports and provide assistance to identify remedial actions
- Document and maintain the risks, controls and control owners in the repository (Process Control)
- Defining and documenting manual control procedure steps
- Regular review of access (UAR) and mitigations against the access risk ruleset (periodic) with root cause analysis
- Following up on escalation workflows for configuration control changes
- Creation/testing of new automated business rules and assignment to controls
- Monitor dashboards and investigate control exceptions
- Actively monitor control deficiencies and remediation plans providing assistance to control owners
- Provide Internal Team Training
- Provide training for control performer and control owners in SAP Process Control

**Stakeholder Integration**
- Support the Head of SAP GRC to operate as liaison between Business Unit management (first line of defence) and key stakeholders that include Internal Audit (3rd line of defence) and External Audit (4th line of defence).

**Qualifications**:

- Bachelor’s degree in risk and compliance management, finance, audit or relevant field from a recognised institution.
- Professionally accredited from a recognised industry body as a Certified Information Systems Auditor (CISA) or a Certified Internal Auditor (CIA) or Chartered Accountant (CA) is an added advantage.
- SAP certification is an added advantage.

**Experience and Knowledge**:

- 3 Years’ experience in external or internal auditing. Training will be provided on the SAP technologies where required
- 3 years in-depth knowledge of internal financial controls.
- Functional experience in SAP Access Control, and SAP Process Control will be an added advantage
- Functional and basic Audit or internal financial controls experience in SAP environment (S/4HANA) is an added advantage
- technical understanding of SAP Fiori is an added advantage.
- Functional and basic technical knowledge and understanding of S/4HANA Security is an added advantage.

**Competencies**:

- Must be customer focused.
- Should have the drive to cultivate innovation.
- Must have the ability to drive results.
- Must be able to perform well in a team, to collaborate.
- Must be able to coach junior team members
- Should demonstrate resilience.
- Must be tech savvy.
- Must have the ability to communicate effectively.
- Should ensure accountability from all teams and stakeholders.