SAP Transformation Risk Manager

The ERP Risk and Automation Services (ERAS) Consulting practice, assists with various consulting, internal, and external audit clients by bringing in-depth ERP, data analytics, and continuity skills where needed. Our ERAS practice is a group of highly specialized, multi-disciplined individuals with experience in multiple regulations and standards including accounting, government, and data privacy to meet the needs of our clients in the upper mid-market. The ERP risk team is typically engaged in complex, non-transactional, at times leading edge engagements that include but are not limited to, ERP implementation risk assessments, security and controls design on ERP implementations, or security and controls improvements for clients operating on large ERPs like SAP, Oracle, or Dynamics, segregation of duties assessments, and key report testing. 

We desire a confident individual who is able to both think strategically about risk and control management, while also being task oriented and capable of meeting the tight deadlines that often come with implementation-related work. We are seeking an individual looking for career growth in a fast-paced environment, with accelerated leadership opportunities.

Responsibilities Include:  

• Provide subject-matter expertise in designing and testing SAP automated application controls 

• Identify optimal SAP functional configuration options for control automation 

• Lead testing of SAP application control design and effectiveness; validate test scripts and review results 

• Act as SME for SAP application controls in external audits (e.g. financial, SOX,  regulatory) 

• Lead teams to assess the design of application controls on new SAP implementations and identify opportunities for automating manual processes and controls, based on interviews with stakeholders as well as review of control documentation such as narratives, process and data flows 

• Conduct research on SAP configuration settings and propose innovative solutions 

• Support SAP transformation projects: process modeling, controls, governance, testing, and data migration 

• Assist in business development by leveraging SAP and business process knowledge 

• Communicate findings and recommendations clearly to clients 

• Assist in SAP Segregation of Duties and Sensitive Access ruleset assessment 

• Model RSM’s core values: caring, curious, collaborative, courageous, and critical thinking 

• Manage, mentor, and motivate multidisciplinary teams to deliver high-quality client solutions 

• Handle multiple client projects while contributing to internal initiatives (talent, practice, business development) 

• Stay informed on industry trends and communicate leading risk management practices 

• Manage a diverse portfolio of client work, ensuring profitability and risk management 

• Mentor future firm leaders and support their professional development 

• Proactively pursue personal development in industry, technical, and leadership areas 

• Build a strong personal brand and network to drive growth for the risk advisory practice 

• Scope, plan, and lead engagements; manage budgets and project delivery 
   

Basic Qualifications: 

• Deep understanding of business processes and controls in SAP (various versions) 

• Minimum 5 years of SAP experience 

• ERP implementation experience; functional SAP background is a plus 

• Preferred secondary ERP experience in the field of security and controls 

• Broad industry experience or deep expertise in a specific industry is a plus 

• Strong executive presence and ability to engage senior client leadership 

• Familiarity with SOX, FDA, data privacy, ICFR, and other audit standards 

• Bachelor’s or Master’s degree in business, accounting, or related field 

• Minimum 5+ years in audit, internal audit, risk management or internal control roles 

• Willingness to travel as needed 

• Basic Understanding of SAP security and GRC (governance, risk and compliance) 

• Proven experience managing project financials and delivering within budget 

• Strong people management skills: mentoring, feedback, workload balancing 

Preferred Qualifications: 

• Preferred Certifications: CPA, CIA, CISA, CFE or similar 

• IT General Controls experience  

• Prior consulting experience 

Standards of Performance:  

• The successful candidate will have a strong sense of leadership and a high level of energy 

• A self-starter with a practice building mentality who is hands on, results-oriented and leads by example  

• Highly respected team leader and people developer with an ability to inspire others to follow 

• Exceptional professionalism that commands the respect of colleagues and subordinates  

• A strong entrepreneurial spirit with the highest levels of professional and personal honestly, integrity and ethic