About the role The SAP GRC & Authorization Engineer is responsible for designing, implementing, and maintaining secure access controls within Nexperia’s SAP landscape. This role ensures compliance with internal policies and external regulations through effective use of SAP GRC tools and robust authorization concepts. The engineer plays a key role in safeguarding sensitive business data and enabling secure operations across SAP platforms. This position reports to the Head of IT Cybersecurity & Operations. This is your new job Develop and maintain SAP roles and profiles across modules (ECC, S/4HANA, BW, Fiori), ensuring alignment with business processes and compliance requirements Lead configuration and operation of SAP GRC Access Control components including ARA, ARM, BRM, and EAM Implement and monitor segregation of duties (SoD) controls, conduct risk analysis, and manage remediation activities Oversee provisioning and de-provisioning processes, ensuring secure and efficient access across SAP systems Support internal and external audits by providing access reports, evidence, and mitigation plans Identify and implement improvements in SAP security architecture, processes, and tools Work closely with SAP functional teams, internal audit, compliance, and business stakeholders to ensure secure and compliant access Maintain comprehensive documentation and provide guidance to IT and business users on SAP security and GRC processes Design, configure, and maintain the internal control framework within the SAP Process Control system Map and implement Processes, Risks, and Controls (PRC) based on business requirements and compliance objectives (e.g., SOX, GDPR) Develop and maintain Automated Controls and Configurable Controls by connecting SAP PC to source systems like S/4HANA Administer the end-to-end compliance workflow, including scheduling and launching Control Self-Assessments (CSAs) and Tests of Effectiveness (TOEs) This is you Bachelor’s or Master’s degree in Information Technology, Business Informatics, or related field 5 years of experience in SAP security, GRC, or IT compliance roles Relevant certifications (e.g., SAP Certified Technology Associate – System Security and Authorizations, CISA, CISM) are a plus Experience in a global enterprise environment is preferred Deep understanding of SAP authorization concepts and role design Hands-on experience with SAP GRC Access Control modules Strong knowledge of SoD principles and regulatory frameworks (e.g., SOX, GDPR) Familiarity with SAP platforms (ECC, S/4HANA, BW, Fiori) Proficiency in SAP security reporting and audit support Strong analytical and problem-solving skills Excellent communication and stakeholder management abilities Ability to work independently and lead initiatives Talent acquisition based on Nexperia vacancies is not appreciated. Nexperia job adverts are Nexperia copyright © material and the word Nexperia® is a registered trademark. D&I Statement As an equal-opportunity employer, Nexperia values diversity not just because it is the right thing to do but because diverse teams perform better. We are dedicated to being inclusive, and a proof point of this dedication is that we were the main partner of the very first Dutch Paralympic Team NL House during the Paris 2024 Paralympic Games. Our recruitment process is inclusive and accessible to all, and we consider all applicants fairly, as well as providing a safe work environment and reasonable adjustments where requested. In addition, we offer our colleagues the possibility to join employee resource groups such as the Pride Network Group or global and local Women's groups. Nexperia is committed to increasing women in management positions to 30% by 2030.