Governance, Risk and Compliance (GRC) Controller

Company:

RCL Foods

Functions:

GRC

Job Type Classification:

Permanent

Location - Town / City:

Westville

Job Description:

RCL FOODS is a deeply rooted South African food manufacturer that produces some of the country’s most-loved brands: Yum Yum peanut butter, Nola mayonnaise, Ouma rusks, and Sellati sugar, just to name a few. At the heart of our culture and strategy is our Purpose – WE GROW WHAT MATTERS – which encapsulates our belief in collectively doing that little more to create a positive impact that matters. We are seeking a highly skilled and experienced Governance, Risk and Compliance (GRC) Controller to join our Group Services Division. The role is responsible for strengthening governance over SAP/SYSPRO and other ERP access, managing user provisioning and authorisations, identifying access and segregation of duties risks, and supporting secure, compliant and optimised business role design across the group. The GRC Controller will act as a key custodian of ERP application security and access governance. The successful incumbent will make informed security decisions, resolve simple and complex authorisation matters, implement practical improvements, and help reduce access risk exposure across SAP/SYSPRO and other ERP platforms. If you have strong SAP/SYSPRO and ERP security experience, a practical understanding of access risk and controls, and the ability to support secure, governed and efficient user access across a complex organisation, this role offers an opportunity to contribute meaningfully to the group’s governance, risk and compliance objectives.

Minimum Requirements:

• Relevant IT or BCom degree.
• Minimum of 3 years’ experience in a GRC or SAP/SYSPRO Consultant role.
• Experience working with SAP/SYSPRO is essential.
• Thorough knowledge of core financial modules, GRC technology and the SAP/SYSPRO authorisation concept.
• Knowledge of security and control configuration across SAP/SYSPRO, GRC and/or related ERP technologies.
• Understanding business process controls, application security and the systems implementation lifecycle.
• Competence in one or more additional ERP or GRC applications such as SAP/SYSPRO S/4HANA, JD Edwards, MACs, Soterion or GRC solutions.

Duties & Responsibilities:

Governance Risk and compliance (GRC)

• Own the GRC application, configure business requirements, identify user access and SoD risks, and support the implementation of financial and operational controls.

User Access

• Administer user provisioning and authorisations across SAP/SYSPRO and other ERP platforms; safeguard systems against unauthorised modification, destruction or disclosure.

Business Role and User Management

• Develop, configure and administer security components; manage role design and compliance; redesign roles for remediation and document mitigating controls.
• Document system security design, testing, implementation and support; assist business, IT and Internal Audit with access analysis and control assurance.

Policy and Procedure Compliance

• Technical design, development, testing, implementation, support, and documentation of system security around user access, business role management and risks within a SAP environment and other ERP systems.
• Work with various business and technical teams to build and maintain system security, participate in problem-solving, monitoring/resolving of technical incidents, researching and implementing best practice methods for role building, user access.
• Provide guidance and direction to other team members and ensure the technical competency of the team is maintained.

Reporting

• Provide reports, information and technical insight to business managers as and when required.
• Provide advisory services to other business entities that fall into the Rainbow Foods group.
• Provide information for monthly key performance indicators.

Team Coordination

• Take ownership of tasks, support team capability, communicate risks and deadlines, and demonstrate effective planning, prioritisation and stakeholder management.

ERP/application security knowledge

• Assist with the redesign and optimisation of Syspro security and access structures, including user roles, permissions, access controls, SoD and compliance initiatives.