Scope of SAP GRC

[Former Member]

Hi Guys,

I have 6 years of experience in Banking Industry and its in Compliance and Client On-boarding for Corporate and Investment Banking client.

Currently I am looking for a certification in SAP Governance, Risk and Compliance. Though I am little worried about the career growth and scope of it in the industry currently.

Another worry is, Is it a good choice of selecting SAP GRC module certification.

Once I finish the certification do I have to start from scratch?

What kind of roles employers are offering after this certification?

Does it involve any coding? (I am not from IT background)

Any thoughts will be very much appreciated.

Regards,

Chan

[Former Member]

Chan,

I have been working in SAP GRC for the past five years, first with one of the "Big 4" consultancies then in industry. I am not a programmer either, so I would say don't let that stop you from considering this career path. Since we don't know where you are located or if you are open to relocation, it is difficult to predict what opportunities might be open to you. Here in the US, it seems that all the major consultancies are hiring experienced GRC consultants, which leads me to think that business must be good. Getting that first job so that you have some experience might be the toughest part.

Be sure to review the blogs and documents linked here if you have not already done so:

Good luck!

Gretchen

[Former Member]

Thank you so much Gretchen

I am from Bangalore, India and yeah I am open to relocation.

It would be great if you could provide few links to go through the SAP GRC books / study material

Thank you so much, much appreciated.

Chan

[Former Member]

Chan,

SAP GRC books and training materials are all copyrighted, which means that the legal way to get them is to buy the books and enroll in the training courses. I would encourage you to not ask for "bootleg",  which is to say illegal, copies of such materials, as that is frowned on here on SCN.

As for links, I did give you one, but I will give you another, to the SCN Rules of Engagement.

You will find that one important rule is to search before posting.  Anyone who wishes to make a career of SAP consulting would do well to remember that Google is your friend. When you apply for a consulting position, it is a safe bet that your prospective employer will see your activity here on SCN. Demonstrating self sufficiency on SCN reflects well on your consulting mindset and is a good habit to acquire. Nearly everyone here on SCN is here as a volunteer and has a day job, so people who sit back and wait to be spoon fed can end up  disappointed. GRC 10 has been GA for nearly five years and has been well documented and discussed at length, so searching first, reading, then asking a question for clarification is a good approach.

Good luck in your career journey!

Gretchen

[Former Member]

Hi Gretchen , Thanks for your valuable inputs.

I get that, Google is our friend

In SAP GRC solutions there are 6 modules as below mentioned. So getting certification in any of the below module will get us the SAP GRC certification or we need to get the certification in all the modules to get SAP GRC certified.

• SAP Access Control
• SAP Process Control
• SAP Risk Management
• SAP Fraud Management
• SAP Audit Management
• SAP Global Trade Services

Thanks in advance,

Chan

[Colleen]

HI Chan

SAP GRC is specialised area for risk and compliance. The product comprises of Access Controls, Process Controls and Risk Management.

Have a look at training.sap.com for the GRC codes (GRC300 for Access Controls, GRC330 for Process Controls and GRC340 for Risk Management).

Access Controls is more widely used (although a lot of clients don't use GRC at all) and covers user provisioning, Firefighting, Segregation of Duties and Role Management. As a result, having a security background in User Administration and Role build can be advantageous.

The difficulty of this module is knowing how to work with the business to analyse, identify, remediate and mitigate risk.

Configuration skills (IMG) are required. Programming skills less though (but could help).

It is a specialised skill set so there are jobs but very hard to say for your circumstances.

Regards

Colleen