> Markdown version of [/jobs/ext/2664800-it-compliance-and-grc-manager](https://www.wearedevelopers.com/jobs/ext/2664800-it-compliance-and-grc-manager). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # IT Compliance and GRC Manager - **Company:** Michael Page - **Location:** Barcelona, Spain - **Contract:** Permanent contract - **Skills:** Cyber Security, Data Integrity, Identity and Access Management, Information Technology Audit, Role-Based Access Control, SAP (Applications), SAP GRC, SAP Security, System Testing, Enterprise Software Applications, IT General Controls (ITGC), SAPBasis, Information Technology, GXP, User Administration - **Published:** August 31, 2026 - **Apply:** https://www.tecnoempleo.com/it-compliance-and-grc-manager-michael-page/sap-sap-grc/rf-47631e3b42df833e7044 ## About the Role * Master´s degree or equivalent qualification in Information Technology, Computer Science, Business Administration, or a related field. * Proven experience in Access Governance, Identity & Access Management (IAM), IT Risk & Compliance, IT Audit, Internal Controls, SAP Security, SAP Authorizations, or SAP GRC within complex enterprise environments. * Professional certifications such as CISA, CISM, CISSP, CRISC, SAP Security/GRC, or Identity & Access Management certifications. * Experience within highly regulated industries, including healthcare, life sciences, pharmaceuticals, manufacturing, or other environments with strong compliance requirements. * Familiarity with regulatory and compliance frameworks such as GxP, GDPR, data integrity standards, system validation practices, and IT control frameworks. * Strong understanding of user access management, role-based access controls (RBAC), segregation of duties (SoD), privileged access management, access reviews, and identity lifecycle processes. * Solid expertise in SAP Security and Authorizations, SAP GRC Access Control, and large-scale SAP landscapes. * Good knowledge of information security principles, IT General Controls (ITGCs), risk management, compliance frameworks, and audit requirements. * Experience working in regulated environments and supporting internal and external audit activities. * Ability to assess access-related risks, translate regulatory and governance requirements into practical controls, and drive remediation initiatives. * Strong stakeholder management, communication, and influencing skills, with the ability to engage effectively across technical, business, and compliance functions. * Demonstrated leadership capabilities, analytical thinking, sound judgment, and a proactive, ownership-driven mindset. ## Description * Lead and enhance the organization´s access governance framework across enterprise applications, identity platforms, and SAP environments. * Ensure effective management of the full access lifecycle, including requests, approvals, provisioning, reviews, privileged access, and segregation of duties controls. * Oversee security and authorization governance across complex SAP landscapes, including access risk management and compliance processes. * Evaluate access-related risks and support remediation activities to ensure compliance with internal controls, security standards, and audit requirements. * Partner with stakeholders across IT, Security, Risk, Compliance, Audit, and business functions to strengthen governance practices and improve control effectiveness. * Support internal and external audits through clear documentation, reporting, and control evidence. * Drive continuous improvement and automation initiatives to increase efficiency, reduce access risks, and enhance transparency through meaningful governance metrics and reporting. * International end client company * Perm position, long time project, Nunca debes compartir tus datos bancarios ni fotos de tus documentos al solicitar un empleo. Si tienes alguna duda sobre un proceso de selección En esta oferta serás redirigido a la pagina web de la empresa. Completa el formulario en su web. * Barcelona (Híbrido) Ubicación * Consultor Funciones * Jornada completa Jornada * 3-5 años Experiencia * Indefinido Tipo contrato * SAP GRC ## Related Videos - [Blueprints for Success: Steering a Global Data & AI Architecture](https://www.wearedevelopers.com/videos/1577-blueprints-for-success-steering-a-global-data-ai-architecture) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Great DevEx and Regulatory Compliance - Possible?](https://www.wearedevelopers.com/videos/1426-great-devex-and-regulatory-compliance-possible) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) ## Related Articles - [Best Companies to Work For in Berlin: Top 14 Companies in 2023 ](https://www.wearedevelopers.com/magazine/188-best-companies-to-work-for-in-berlin-top-14-companies-in-2023) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries) - [System change: restart as developer?](https://www.wearedevelopers.com/magazine/39-system-change-restart-as-developer) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Spanish Business Culture and Etiquette](https://www.wearedevelopers.com/magazine/353-spanish-business-culture-and-etiquette)