SAP Controls Design and Transformation Associate Director, Technology and Transformation

Connect to your Industry

The Controls Advisory team supports those accountable for managing organisations technology risks and compliance requirements through driving efficiency, effectiveness, and modernisation of their control environment to achieve better business outcomes. We focus on increasing our client’s confidence in their compliance and control whilst reducing cost and effort.

Our team works cross industry helping senior client leaders with some of their most important and reputationally impactful challenges.

Connect to your career at Deloitte

Deloitte drives progress. Using our vast range of expertise, we help our clients' become leaders wherever they choose to compete. To do this, we invest in outstanding people. We build teams of future thinkers, with diverse talents and backgrounds, and empower them all to reach for and achieve more.

What brings us all together at Deloitte? It’s how we approach the thousands of decisions we make every day. How we behave, our beliefs and our attitudes. In other words: our values. Whatever we do, wherever we are in the world, we lead the way, serve with integrity, take care of each other, foster inclusion, and collaborate for measurable impact. These five shared values lead every decision we make and action we take, guiding us to deliver impact how and where it matters most.

Connect to your opportunity

As an Associate Director, you will lead and oversee a variety of SAP controls design and transformation work including the use of SAP GRC solutions across a portfolio of diversified clients in different industries where you will be required to lead and collaborate effectively. The ideal candidate will have extensive experience with SAP automated business controls, General IT Controls and a strong understanding of SAP GRC solutions with a particular focus on SAP GRC Process Control, Risk Management and Audit Management. An understanding of SAP Risk and Assurance Management (RAM) would also be beneficial.

The candidate should be able to demonstrate experience leading teams through end-to-end SAP controls transformation programmes and GRC implementations at large and complex organisations, from scoping and planning through to design, implementation and deployment. You will demonstrate and develop your capabilities in the following areas:

• Lead teams towards the design and implementation of technology-enabled controls in SAP for key business areas such as Order to Cash (OTC), Procure to Pay (PTP), and Record to Report (RTR) as well as IT.
• Experience supporting large and complex organisations to maximise the returns from their investment in S/4HANA through automation and systemisation of the control environment.
• A strong understanding of business controls, from design, deployment, and operation through to testing and assurance.
• Designing and building innovative solutions to maximise the value derived from SAP GRC Products through automation and monitoring, including Continuous Controls Monitoring (CCM) over configured and transactional controls in S/4HANA and the deployment of system-driven workflows to streamline risk and control activities.
• Lead teams towards successful delivery of the design, configuration, and implementation of SAP GRC products to systemise and automate the operation, monitoring and testing of controls at large organisations and report using standard and custom dashboards
• Advising on an optimal solution design to suit the specific regulatory and internal requirements that the organisation must adhere to.
• Maintaining a strong understanding of the Governance, Risk and Compliance market and regulatory environment such as SoX, PCAOB, UK Corporate Reform etc.
• Manage and mentor a team of SAP Controls specialists, fostering their growth and ensuring high-quality performance.
• Work closely with IT, Audit, Compliance, and other business teams to align SAP Controls design with business needs and compliance requirements.
• Collaborate with the functional and other project team to ensure Controls are designed and embedded within processes
• Project manage delivery and communicate engagement issues and findings to senior management and client personnel.
• Lead market activities including preparing and finalising GTM materials, responding to proposals and bid activities.
• Leading strong client relationship through interactions with client personnel, ensuring quality in delivering of client service.

Connect to your skills and professional experience

You work collaboratively within diverse teams. Someone who connects with team members and shares information and ideas within the team. You always treat others with respect, clarifying expectations and confidently contributing to team discussions.

You employ critical thinking to support solving business problems. You analyse problems objectively by considering facts, relevant professional standards or research, data and differing perspectives to support solutioning. You understand the importance of technology on our stakeholders’ operations for the areas we collaborate with the.

Respects the needs of colleagues and builds cooperative relationships. You embrace diversity across teams, and respects and values contributions of those from diverse backgrounds fostering a team environment.

Specifically, candidates should possess the following attributes:

• Extensive experience in Control design and implementations, ability to lead and drive end to end assessment, design and implementation
• Extensive experience leading SAP GRC implementations, especially GRC Process Control, Risk Management, Risk & Assurance Management
• Experience in integrating SAP GRC Process Control with other solutions including GRC Access Control including BTP.
• Strong understanding of the SAP authorisation concepts related to SAP GRC solutions.
• Proficiency in SAP platforms such as ECC, S/4HANA, Fiori, and other relevant modules.
• Deep knowledge of Sarbanes-Oxley (SOX) regulatory requirements, and the impact of these requirements on the requirements and design of GRC solutions.
• Experience applying automation to improve the efficiency and effectiveness of process and control using technologies such as Continuous Controls Monitoring and data analytics.
• An understanding of the technical architecture underlying SAP GRC Products.
• Excellent project management skills, with the ability to manage multiple priorities, drive deadlines, and lead teams effectively.
• Able to clearly articulate complex solution design decisions and principles to senior stakeholders throughout an implementation project.
• Strong analytical, problem-solving, and communication skills, with the ability to explain technical concepts to non-technical stakeholders
• Excellent oral and written communication skills including in English (proficient)
• Clearly communicate engagement issues and findings to senior management and client personnel.

Desirables

The following will be considered an asset:

• Working knowledge of GRC products like SAP Process Control, SAP Access Controls/IAG, Risk Management, Audit Management, Risk & Assurance Management
• CISA, CISSP, or other relevant certifications.

As recent events have reminded us, there are no certainties in business. Risk is everywhere. But so is opportunity. Your expertise will help our clients stay one step ahead of what hasn’t even been imagined yet.

Connect to your business - Technology and Transformation

Distinctive thinking, deep expertise, innovation and collaborative working. That’s what connects us. That’s what makes us Deloitte. If you want to help solve some of the biggest tech and transformational challenges around, join us. Together, we’ll make an impact that matters.

Personal independence

Regulation and controls are standard practice in our industry and Deloitte is no exception. These controls provide important legal protection for both you and the firm. We are subject to a number of audit regulations, one of which requires that certain colleagues abide by specific personal independence constraints (e.g., in relation to any financial interests and employment relationships). This can mean that you and your "Immediate Family Members" are not permitted to hold certain financial interests (shares, funds, bonds etc.) with audit clients of the firm, and also prohibitions on certain employment relationships (e.g., you are not permitted to hold a secondary employment role with SEC audit clients of the firm whilst being employed by the firm). The recruitment team will provide further detail as you progress through the recruitment process or you can contact the Independence team upon request.

For a full job description please visit our online Deloitte Careers portal.