- Lead and enhance the organization´s access governance framework across enterprise applications, identity platforms, and SAP environments.
- Ensure effective management of the full access lifecycle, including requests, approvals, provisioning, reviews, privileged access, and segregation of duties controls.
- Oversee security and authorization governance across complex SAP landscapes, including access risk management and compliance processes.
- Evaluate access-related risks and support remediation activities to ensure compliance with internal controls, security standards, and audit requirements.
- Partner with stakeholders across IT, Security, Risk, Compliance, Audit, and business functions to strengthen governance practices and improve control effectiveness.
- Support internal and external audits through clear documentation, reporting, and control evidence.
- Drive continuous improvement and automation initiatives to increase efficiency, reduce access risks, and enhance transparency through meaningful governance metrics and reporting.

• International end client company • Perm position, long time project

- Master´s degree or equivalent qualification in Information Technology, Computer Science, Business Administration, or a related field.
- Proven experience in Access Governance, Identity & Access Management (IAM), IT Risk & Compliance, IT Audit, Internal Controls, SAP Security, SAP Authorizations, or SAP GRC within complex enterprise environments.
- Professional certifications such as CISA, CISM, CISSP, CRISC, SAP Security/GRC, or Identity & Access Management certifications.
- Experience within highly regulated industries, including healthcare, life sciences, pharmaceuticals, manufacturing,



or other environments with strong compliance requirements.
- Familiarity with regulatory and compliance frameworks such as GxP, GDPR, data integrity standards, system validation practices, and IT control frameworks.
- Strong understanding of user access management, role-based access controls (RBAC), segregation of duties (SoD), privileged access management, access reviews, and identity lifecycle processes.
- Solid expertise in SAP Security and Authorizations, SAP GRC Access Control, and large-scale SAP landscapes.
- Good knowledge of information security principles, IT General Controls (ITGCs), risk management, compliance frameworks, and audit requirements.
- Experience working in regulated environments and supporting internal and external audit activities.
- Ability to assess access-related risks, translate regulatory and governance requirements into practical controls, and drive remediation initiatives.
- Strong stakeholder management, communication, and influencing skills, with the ability to engage effectively across technical, business, and compliance functions.
- Demonstrated leadership capabilities, analytical thinking, sound judgment, and a proactive, ownership-driven mindset.

International end client company based in Barcelona.

• General role within an international environment, working alongside highly skilled professionals. • Permanent position with direct employment by the hiring organization. • Competitive compensation package aligned with the experience and expertise you bring. • Hybrid working model (3 days per week in the office). • Comprehensive benefits package. • Strong opportunities for long-term career growth and professional development. • Location: Barcelona

📌 IT Compliance and GRC Manager (Barcelona)
🏢 Michael Page
📍 Barcelona