GRC Consultant - Life Sciences - Germany

Infosys Consulting is seeking a GRC Consultant to join our Digital Platforms Practice specializing in SAP Risk, Security, and Compliance Transformation for Life Sciences clients.

As a GRC Consultant, you will help pharmaceutical and biotechnology organizations design, implement, and optimize security, governance, risk, and compliance capabilities across SAP-enabled business processes and digital transformation programs.

Responsibilities:

• Assess SAP security, controls, and compliance risks across complex enterprise environments.
• Design and implement SAP Security and GRC solutions aligned with business, regulatory, and audit requirements.
• Support security and controls design during SAP S/4HANA transformation and cloud migration programs.
• Define Segregation of Duties (SoD) frameworks and remediation strategies.
• Conduct control assessments, gap analyses, and risk evaluations across SAP and integrated application landscapes.
• Design business process controls, IT General Controls (ITGCs), and automated controls.
• Support implementation of sustainable governance, compliance, and monitoring processes.
• Assist clients in preparing for internal and external audits.
• Configure and optimize SAP Security and SAP GRC Access Control capabilities.
• Support authorization concepts across SAP ECC, S/4HANA, Fiori, BTP, and hybrid environments.
• Support compliance initiatives related to GxP, 21 CFR Part 11, Annex 11, Data Integrity, and Computer System Validation requirements.
• Collaborate with Quality, Regulatory, and IT stakeholders to ensure compliant system design and operation.
• Contribute to inspection readiness and validation activities for regulated systems.
• Facilitate client workshops and stakeholder discussions.
• Explain security and compliance concepts to both business and technology audiences.
• Collaborate with functional, technical, security, and audit teams to deliver integrated solutions.
• Support knowledge transfer and capability development activities.

Basic Qualifications:

• Strong understanding of SAP Security and Governance, Risk & Compliance principles.
• Experience with SAP GRC Access Control, including Access Risk Analysis, Access Request Management, and Emergency Access Management.
• Experience supporting SAP ECC and/or SAP S/4HANA environments.
• Understanding of ITGCs, business process controls, risk management, and audit methodologies.
• Knowledge of Segregation of Duties analysis and controls remediation.
• Familiarity with identity and access management concepts across enterprise application landscapes.
• Experience participating in SAP transformation, migration, or compliance programs.
• 5+ years of SAP Security, Controls, GRC, or Compliance consulting experience.
• Bachelor's degree in Information Technology, Computer Science, Engineering, or related field.

Preferred Qualifications:

• Experience within pharmaceutical, biotechnology, or other regulated industries.
• Understanding of GxP, 21 CFR Part 11, Annex 11, Data Integrity, and Computer System Validation requirements.
• Experience designing controls and governance frameworks for AI-enabled business processes and intelligent automation within SAP and adjacent enterprise platforms.
• Experience supporting SAP S/4HANA transformation programs.
• Familiarity with SAP BTP, SAP Cloud solutions, and hybrid architectures.
• Experience with SAP Identity Access Governance (IAG), SAP IDM, or enterprise IAM platforms.
• Knowledge of ServiceNow, Archer, Splunk, or related governance and monitoring tools.
• SAP Security or SAP GRC certifications.
• CISA, CISSP, CRISC, or equivalent professional certifications.
• Experience working with global delivery teams and offshore models.
• Strong communication, stakeholder management, and problem-solving skills