Business Relationship Officer - Security & GRC Lead

Have you ever thought about being part of a company that reimagines chemistry every day to build a better world?

That’s the purpose of Indorama Ventures, and we want you with us on this journey!

We are looking for innovative, collaborative professionals who are ready to embrace the challenge of working in a company that is constantly expanding internationally.

We value flexibility, partnership, and believe that the impact of our actions goes far beyond the chemical industry.

Here, diversity matters.
Our work environment is inclusive, diverse, and guided by respect, ethics, and equal opportunities for all.

What we’re looking for:

The SAP Security & GRC Lead is responsible for defining, managing, and governing SAP security architecture, and continuous improvement of Security & SAP GRC processes across Indovina. This role ensures secure access management, regulatory compliance, audit readiness, and risk mitigation while partnering closely with business, IT, audit, and compliance teams

Key Responsibilities:

SAP Security & Authorization Management

• Lead end to end SAP security administration across ECC, S/4HANA, BW/BI, MDG, CRM, Ariba, and related systems
• Design and maintain authorization concepts and role architecture (Single, Composite, Derived, Business, and Fiori roles)
• Maintain and optimize SU24 authorization proposals for standard and custom transactions
• Perform advanced authorization troubleshooting using SU53, ST01, STAUTHTRACE, SM20, SUIM
• Manage mass user administration (user provisioning, role assignments, locking/unlocking, validity extensions)

SAP GRC Access Control

• Lead implementation and operational support of SAP GRC Access Control (10.1 / 12.0):
• Access Risk Analysis (ARA)
• Access Request Management (ARM)
• Emergency Access Management (EAM / Firefighter)
• Business Role Management (BRM)
• User Access Review (UAR)
• Review MSMP workflows, BRF+ rules, and request path approvals.
• Manage SoD rule sets, risk functions, mitigation controls, and simulation scenarios.
• Ensure effective Firefighter access governance, including FFID ownership, controller reviews, and log monitoring.
• Perform periodic risk analysis, remediation, and mitigation assignments at user and role level.

Fiori Security

• Design and support Fiori security

- Catalogs, Groups, Spaces, Tiles

- 0Data service authorizations

• Troubleshoot Fiori authorization issues using system traces and error logs
  

  Compliance, Audit & Risk Management

• Act as SAP security & GRC SPOC for internal & external audits (SOX, ITGC, GDPR, SOC, etc.)
• Prepare and provide audit evidence, access reports (SUIM, SM20), and remediation documentation.
• Drive continuous audit readiness, access reviews, and control effectiveness.
• Support license audits and optimization initiatives through role and access analysis.
• Maintain SAP risk registers aligned with enterprise GRC and compliance frameworks.
• Ensure adherence to enterprise security policies and regulatory controls

• Identity, Access & Integration

• Ensure secure user lifecycle management: joiner, mover, leaver processes.
• Coordinate SAP security activities with Corporate Security, Basis, Functional, and Infrastructure teams.

• Reporting & Continuous Improvement

• Generate GRC dashboards, risk reports, firefighter usage reports, and management summaries.
• Identify and implement process improvements to reduce provisioning time and audit findings.
• Drive automation and standardization across SAP security and GRC operations.
• Continuously improving access provisioning efficiency and compliance posture

• Mentorship

• Mentor junior consultants or analysts and foster a collaborative team environment.
• Bring strong thought-leadership mindset with clear understanding of business requirements and SAP solutions.
  

  Required Knowledge/Skills:
  

  Technical Skills

• SAP ECC & S/4HANA Security
• SAP GRC Access Control 10.1 / 12.0
• Fiori Security & Gateway Authorizations
• SoD Risk Analysis & Mitigation
• Authorization Troubleshooting (SU53, ST01, STAUTHTRACE)
  

  Required Experience:

• 8–10 years of experience in SAP Security & GRC
• Familiarity with ERP systems (SAP, Oracle) and compliance standards

• Compliance Knowledge

• SOX, ITGC, GDPR
• SAP Audit & Access Controls
• License and security compliance

• Soft Skills

• Excellent analytical, problem-solving, and communication skills.
• Excellent verbal and written communication skills, with the ability to engage both technical and non-technical audiences.
• SAP Security / GRC Certifications preferred
  

  Required Education:

  •Bachelor’s degree in business, Engineering or related field.

What do we offer?

A competitive compensation package, including:
• Health insurance
• WellHub / TotalPass
• Life insurance
• And other exclusive benefits

The division you’ll be joining is a global leader in the chemical industry. We offer a broad portfolio of solutions and high delivery standards to markets such as Crop Solutions, Home and Personal Care, Coatings, Energy & Resources, and Performance Products.

Here, you can make a difference. Join us!