Senior Cybersecurity GRC Engineer

About the role

The Senior Cybersecurity GRC Engineer will lead the SAP Governance, Risk, and Compliance (GRC) framework for qataralumi. You will ensure robust access controls, segregation of duties, and regulatory compliance across all SAP environments while supporting audit readiness and IT security governance.

Key responsibilities

• Configure and maintain SAP GRC Access Control, Process Control, Risk Management, and Emergency Access Management modules.
• Design and manage business roles, composite roles, and authorization objects within SAP GRC.
• Perform SoD analysis, role‑based access control (RBAC) implementation, and regular user access certifications.
• Monitor user access patterns, investigate security incidents, and support internal and external audits.
• Generate departmental reports and contribute to continuous improvement initiatives aligned with international best practices.
• Support Qatarization by developing and training national employees.

Required profile

• Proven experience in SAP GRC administration and cybersecurity governance.
• Strong knowledge of cybersecurity frameworks such as ISO 27001, NIST, and NCSA.
• Ability to conduct risk assessments, vulnerability analyses, and security documentation.
• Excellent analytical skills and attention to detail.

Required skills

• SAP GRC Access Control, Process Control, Risk Management, Emergency Access Management
• SAP BusinessObjects and Power BI reporting tools
• Cloud security platforms: AWS, Azure, GCP
• Segregation of duties (SoD) analysis and role‑based access control (RBAC)