SAP GRC and IAG Consultant

This role is focused on Cyber Security Risk, Governance, Risk & Compliance (GRC), IT Controls, and Security Audits, with strong emphasis on Backup, Disaster Recovery (DR), and Business Continuity (BCP).

Key responsibilities:

• Perform security control assessments against organizational policies, security standards, and regulatory requirements.
• Identify control gaps, risks, audit findings, and compliance issues, and monitor remediation until closure.
• Assess Backup, Disaster Recovery, and Business Continuity processes and controls.
• Validate backup availability, restoration/recovery procedures, DR readiness, and evidence of periodic DR/BCP testing.
• Conduct control testing and risk assessments and support internal/external security audits.
• Review security policies, procedures, standards, and governance frameworks for compliance.
• Maintain audit evidence, track findings, and coordinate with stakeholders for remediation.
• Support overall security governance, regulatory compliance, and IT risk management activities.

Required Skills

• Cyber Security Risk & Compliance / GRC
• IT Risk & Controls
• Security Control Assessment & Testing
• Security Audits
• Backup & Disaster Recovery
• BCP / DR
• Risk Assessment
• Compliance & Governance
• Security Policies & Standards
• Audit Finding & Remediation Management

We are seeking an experienced Governance, Risk & Compliance (GRC) Lead to spearhead the

design, implementation, and maintenance of our ISO 27001 Information Security Management

System (ISMS). This is a hands-on leadership role responsible for establishing a robust security

governance framework, achieving ISO 27001 certification, and embedding a culture of

continuous security improvement across the organization.

Key Responsibilities

● ISMS Implementation & Certification: Lead end-to-end ISO 27001 implementation

from gap analysis through to successful Stage 1 and Stage 2 certification audits;

manage external auditor relationships

● Risk Management: Develop and operationalize the information security risk

management framework; conduct risk assessments, treatment planning, and risk

acceptance processes.

● Policy & Governance : Author, approve, and maintain the Statement of Applicability

(SoA), information security policies, standards, and procedures aligned with ISO 27001

Annex A controls.

● Control Implementation: Translate ISO 27001 Annex A controls into operational

security measures; coordinate with IT, Accounts, HR, Backoffice, and business units to

implement and validate controls.

● Compliance Monitoring: Establish continuous monitoring, internal audit programs, and

KPIs/KRIs to measure ISMS effectiveness; manage non-conformities and corrective

actions.

● Third-Party Risk: Oversee vendor security assessments and ensure supply chain

security controls meet organizational and ISO 27001 standards.

● Stakeholder Management: Report ISMS performance, risks, and compliance status to

senior leadership and the board; act as primary liaison for external auditors and

regulators.

Required Qualifications

● 5+ years of experience in information security governance, risk, and compliance

● Proven track record of leading at least one full ISO 27001:2022 certification cycle (gap

analysis → certification)

● Deep expertise in ISO 27001:2022 standard, Annex A controls, and ISMS

documentation requirements

● Strong understanding of risk assessment methodologies (e.g., ISO 27005, NIST RMF,

OCTAVE, FAIR)

● Familiarity with internal audit practices and managing external certification bodies

● Excellent stakeholder management and ability to influence across technical and non-

technical teams

● Strong documentation and communication skills — able to translate complex standards

into actionable guidance

Preferred Qualifications

● Experience implementing ISMS in fintech, healthcare, or regulated industries

● Experience with SOC 2, GDPR, NIST CSF, PCI-DSS, or other compliance frameworks

● Background in cloud security (AWS, Azure, GCP) and DevSecOps environments

● Knowledge of automation for compliance evidence collection and control testing

● Certifications: CISM, CRISC, CISA, ISO 27001 Lead Auditor, or ISO 27001 Lead

Implementer

Why Join Us

● Opportunity to build the security governance function from the ground up

● High-visibility role with direct impact on customer trust and market differentiation

● Collaborative environment that values security as a business enabler, not a blocker

Company Profile:

We are a one-stop financial services shop, widely known for quality of its advice, personalized

service and cutting-edge technology. We started our journey in 2008. Currently we are serving

more than 50,000 investors with a team of 100 members. Our core product offering is mutual

fund, FD, Govt. Bonds, Debenture, etc.

We are looking for a Senior SAP Consultant with a strong SAP FICO background and proven experience in end-to-end SAP implementations, migrations & transformation projects.

🔑 Key Skills:

✅ SAP FI/CO – GL, AP, AR, AA, CO-CCA, PCA, COPA, Product Costing

✅ S/4HANA Implementation / Migration

✅ Cross-module integration with MM, SD, PP

✅ End-to-end SAP Implementation experience

✅ Solution Design & Client Handling

✅ Pre-sales, Requirement Gathering & Solutioning

✅ Team Leadership & Mentoring

✅ Exposure to SAP Cloud / S/4HANA Cloud preferred

🎯 Ideal candidate: Someone who can go beyond FICO and take ownership of core SAP delivery, implementation leadership, and solutioning.

About Searce

Searce is a global, AI-native, engineering-led technology consultancy and a Premier Google

Cloud Partner — recognized as the Google Cloud Workplace AI Transformation Partner of the

Year, APAC (2026). With 20+ years of experience and 3,000+ clients across 10+ countries, we

help businesses stay ahead of the cloud curve.

The Role

We're looking for a Lead Cloud Security & Reliability Engineer with deep GCP expertise to own

end-to-end cloud reliability and security forAPAC enterprise clients. As Lead, you'll set the architectural direction, mentor your squad, and drive measurable client outcomes across multi-

cloud environments.

What You'll Do

Own Client Delivery — Lead 24x7 GCP cloud operations forAPAC clients. Define SLO frameworks and ensure adherence.

Architect Solutions — Design scalable, secure GCP-primary architectures with multi-cloud awareness.

Drive Reliability — Lead incident response, RCA, and long-term remediation across production systems.

Mentor & Elevate — Coach and grow a squad of Senior CSREs.

Drive FinOps — Own cloud cost governance and optimization with quantified impact.

Be the Expert — Represent Searce's technical depth in global client conversations.

What We're Looking For

Experience

7–12 years total with 5+ years on GCP cloud infrastructure

Strong background in Cloud Managed Services / MSP environments

Proven experience leading a team in client-facing delivery

Multi-cloud exposure (AWS/Azure secondary) preferred

Technical Skills (Must-Have)

• GCP: GKE, IAM, VPC, Cloud Monitoring, Stackdriver, KMS — demonstrated in work
• experience
• Kubernetes: GKE — production cluster management, Helm
• IaC: Terraform — module-level, reusable frameworks
• Observability: Prometheus, Grafana, Thanos or equivalent
• Security: IAM, Zero-trust, DevSecOps, CSPM tools
• Scripting: Python or Go
• FinOps: GCP cost governance demonstrated

Nice to Have

• GCP Professional Cloud Architect / Pro DevOps Engineer certification
• AWS / Azure secondary experience
• CKA (Certified Kubernetes Administrator)
• ITIL / change management awareness
• APAC client delivery experience

Why Searce?

🏆 Google Cloud Partner of the Year — APAC 2026

🌍 Work with APAC enterprise clients across multiple industries

🤖 AI-first, engineering-led culture

📈 Lead-level ownership with real career growth

🤝 HAPPIER values — Humble, Adaptable, Positive, Passionate, Innovative, Excellence,

Responsible

ServiceNow USEM Technical Consultant -(Offshore) Contract Role

· Location- Remote

· Contract- 6 months

Job Description

Position Description:  

The ServiceNow USEM (SecOps) Technical Consultant (Security Operations) is responsible to lead the design, development, and implementation of security operations (SecOps) solutions on the ServiceNow platform. This role is responsible for integrating security workflows, enhancing automation, and optimizing security response processes to ensure robust cybersecurity operations. 

Primary Responsibilities: 

Design, configure, and implement ServiceNow GRC/IRM modules, focusing on Policy, Compliance, and Risk Management frameworks. Develop custom solutions utilizing Flow Designer, Business Rules, Client Scripts, UI Actions, UI Policies, and Script Includes.

Configure Service Portal/Employee Center components, Service Catalog record producers, notifications, inbound email actions, and email-actionable approvals.

Manage Access Control Lists (ACLs) and role-based access designs alongside SLA definitions and task-based SLA behaviors.

Handle update set management and oversee code promotion across development, test, and production instances.

Requirements

Qualifications: 

· 5+ years hands-on ServiceNow development experience, with demonstrable delivery on client-facing implementation projects

· 2+ years working directly in ServiceNow GRC/IRM, specifically Policy and Compliance Management and/or Risk Management. Candidates whose GRC exposure is limited to a single mod

· Demonstrated experience with Flow Designer, business rules, client scripts, UI Actions, UI Policies, and script includes

· Experience configuring notifications and inbound email actions, including email-actionable approvals

· Experience with ACL configuration and understanding of role-based access design

· Experience with SLA definitions and task-based SLA behavior

· Experience with Service Catalog record producers and Employee Center / Service Portal configuration

· Proficiency with update set management and promotion across development, test, and production instances

· ServiceNow Certified System Administrator (CSA) required CIS Advanced Risk preferred 

· Work Experience: 5+ years

· Industry: Technology

End-to-End SAP-ERP project (BBP to module Go-live)

Experience: 5+Years

Should have done minimum 2-3 End to End Implementations and 1-2 Support Projects.

Strong Knowledge in Implementation.

Involved in workshops for requirement gathering of the client business processes.

Coordinate with the stakeholders during requirement gathering and execution phases.

Hands-on capabilities in Blueprinting, Configuration and Testing the complete process cycles.

Integration knowledge across modules, including Payroll, Projects, TRM, BPC, FM, MM, PM and SD.

Good to have an exposure in PSU processes.

Involved with technical team in providing the functional specifications and testing of client business processes.

Involved in user training workshops, documentation and handling day-to-day issues.

Should have good communication skills and be able to successfully conduct Workshops.

Should have experience of handling a team.

Client interfacing.

Role Overview

We are looking for an experienced SAP Architect / Principal SAP Architect to lead SAP architecture, integration, modernization, and transformation initiatives across the organization.

The ideal candidate will have a strong foundation in SAP architecture and development, combined with experience in SAP Integration, Data, Cloud and AI technologies. The role requires someone who can work closely with business and technology leadership to design scalable solutions and drive technology transformation.

Location - Hybrid Noida (2 days in a week)/Remote

Key Responsibilities

• Define and own end-to-end SAP solution architecture aligned with business objectives.
• Design and govern integration between SAP and non-SAP enterprise applications.
• Drive architecture across SAP CPI / Integration Suite, PI/PO, APIs, IDocs and enterprise interfaces.
• Architect and enable modern SAP data solutions, including SAP Data Fabric / Business Data Cloud (BDC).
• Identify opportunities to leverage SAP AI Core, GenAI and SAP Analytics Cloud for business transformation.
• Simplify fragmented IT landscapes and enable harmonization of data, systems and business processes.
• Translate functional requirements into scalable and technically feasible solutions.
• Provide technical leadership, architecture guidance and design reviews to SAP development and integration teams.
• Establish reusable architecture patterns, standards and governance.
• Identify technical risks and roadblocks and drive their resolution.
• Work closely with business stakeholders, functional teams and technology leadership.

Required Skills & Experience

• 10+ years of experience in SAP technology, architecture and solution delivery.
• Strong experience in SAP Solution / Technical Architecture.
• Strong hands-on foundation in SAP ABAP.
• Must have worked with wide variety of applications in SAP e.g. ECC, S4HANA, SAP-IS, SAP BW, SAP BODS, HANA Cloud, SAP DataSphere etc
• Past experience of developing integration connectors and adapters using interfaces e.g. RFC, BAPI, IDOC, ODATA, Table Reader, ODP, SAP-BW OHD, CDS etc
• Experience with SAP and third-party system integration.
• Exposure to SAP BTP, SAP Data Fabric / BDC and SAP Analytics Cloud.
• Strong understanding of enterprise data and process integration.
• Excellent stakeholder management and communication skills.

Certifications

• SAP Certified Development Specialist – ABAP for SAP HANA 2.0
• SAP Certified Associate – Design Thinking
• Relevant SAP Architecture, BTP, Integration or Data certifications would be an advantage.

We are looking for an experienced SAP Ariba Consultant with strong hands-on experience in Ariba implementation and Indirect Procurement.

Key Responsibilities

• Handle end-to-end SAP Ariba implementation and configuration.
• Work on Ariba Sourcing, Contracts, Buying, and Invoicing.
• Configure workflows, forms, templates, approval rules, and catalogs.
• Manage RFI, RFP, RFQ, and Auction processes.
• Configure requisition, PO, GR, and invoice processes.
• Handle SAP Ariba CIG integration with SAP S/4HANA.
• Support master data and transactional data integration.
• Work on external requisition imports and data mapping.
• Support testing, UAT, cutover, and hypercare.
• Troubleshoot configuration and integration issues.
• Coordinate with business users, IT teams, and vendors.

Required Skills

• 8+ years of SAP Ariba experience.
• Strong experience in Ariba Sourcing, Contracts, Buying, and Invoicing.
• Hands-on Ariba configuration and customization.
• Strong knowledge of SAP Ariba CIG.
• Experience with SAP S/4HANA integration.
• Knowledge of P2P processes.
• Experience with CXML, APIs, and data imports.
• Good communication and stakeholder management skills.

Good to Have

• Groovy scripting
• SAP P2P
• Tosca/testing tools
• Third-party integrations
• SAP S/4HANA Procurement 

IT Compliance Manager – Web3 & Digital Assets

📍 Location: Dubai, UAE

💼 Employment Type: Full-Time

🏢 Department: Technology / Compliance

📊 Experience: 5+ Years

🌐 Industry: FinTech / Web3 / Digital Assets

About the Role

We are looking for an experienced IT Compliance Manager – Web3 & Digital Assets to lead technology compliance, IT governance, risk management, and cybersecurity controls within a regulated FinTech and digital-asset environment.

The ideal candidate will have strong experience in IT GRC, technology risk, cybersecurity governance, Web3/blockchain, digital assets, and regulatory compliance, with UAE regulatory experience being highly preferred.

Key Responsibilities

• Manage IT governance, compliance frameworks, policies, procedures, and technology risk assessments.
• Support compliance with UAE virtual asset and financial-services regulations, including VARA, DFSA, FSRA, and UAE Central Bank requirements, where applicable.
• Assess technology risks across blockchain infrastructure, crypto wallets, custody, APIs, cloud platforms, databases, smart contracts, and dApps.
• Review controls related to crypto deposits, withdrawals, transfers, wallet operations, and transaction monitoring.
• Develop and monitor controls aligned with ISO 27001, SOC 2, NIST, PCI DSS, and relevant regulatory requirements.
• Coordinate IT audits, regulatory audits, compliance assessments, evidence collection, and remediation activities.
• Maintain technology risk registers, control assessments, compliance reports, and management dashboards.
• Partner with Engineering, Product, Security, Legal, Risk, AML/KYC, Finance, and Operations teams.
• Embed compliance and technology-risk requirements into product development, system changes, and technology architecture.
• Support regulatory licensing, assessments, and ongoing compliance requirements for digital-asset services.

Requirements

• Bachelor's degree in IT, Computer Science, Cybersecurity, Finance, Risk Management, or a related discipline.
• 5+ years of experience in IT Compliance, IT GRC, Technology Risk, Cybersecurity Governance, or a related field.
• Experience in FinTech, banking, payments, cryptocurrency, blockchain, digital assets, or financial services.
• Strong understanding of Web3, blockchain networks, crypto wallets, digital-asset transactions, custody, and smart-contract risks.
• Hands-on experience with IT governance, risk assessments, control testing, audits, and compliance frameworks.
• Strong knowledge of ISO 27001, SOC 2, NIST, PCI DSS, ITGC, or similar frameworks.
• Experience working with auditors, regulators, and cross-functional technology teams.
• Strong analytical, documentation, communication, and stakeholder-management skills.

UAE / Web3 Experience – Preferred

• Experience with VARA, DFSA, FSRA, UAE Central Bank, or other UAE financial regulators.
• Experience supporting VASP licensing or regulatory approvals.
• Previous experience in crypto exchanges, digital-asset platforms, blockchain companies, Web3 startups, or FinTech organizations.
• Understanding of AML/KYC, transaction monitoring, custody, wallet security, and digital-asset controls.

Preferred Certifications

• CISA
• CISM
• CISSP
• CRISC
• ISO 27001 Lead Auditor / Lead Implementer
• CAMS

Key Skills

IT GRC | IT Compliance | Technology Risk | Web3 Governance | Blockchain Risk | Digital Asset Compliance | VASP Licensing | UAE Regulatory Compliance | ITGC | Cybersecurity Governance | ISO 27001 | SOC 2 | NIST | PCI DSS | IT Audit | Risk Assessment | Crypto Transaction Monitoring | Stakeholder Management

DevOps & Cloud Security Specialist to architect enterprise-grade AWS networking, implement strict IAM security boundaries (HIPAA/GDPR compliance), automate infrastructure via IaC, and maintain crystal-clear technical documentation.

1. Primary Must-Have Competencies (Core Priorities)

A. AWS Networking & VPC Topology (Top Priority)

• Advanced VPC Architecture: Mastery in designing multi-VPC topologies, isolated subnets, custom Route Tables, NAT Gateways, Transit Gateways, and Cross-Region VPC Peering.
• Private Network Security: Extensive experience using VPC Endpoints (Gateway & Interface/PrivateLink) to keep internal AWS traffic completely off the public internet.
• Traffic Ingestion & Edge Security: Expertise in AWS WAF (custom rules, bot control, rate limiting), API Gateway throttling, ALB configuration, and Route 53 global routing.

B. AWS Security, IAM Architecture & Compliance

• Enterprise IAM Governance: Expertise in AWS Organizations, IAM Identity Center (SSO), Permission Boundaries, Service Control Policies (SCPs), and temporary role assumption across multi-account setups.
• Data Protection & Key Management: Deep knowledge of AWS KMS (customer-managed keys, envelope encryption at rest and in transit) and AWS Secrets Manager.
• Audit & Compliance: Setting up centralized logging pipelines (CloudTrail, GuardDuty, AWS Config, CloudWatch Audit Logs) for strict HIPAA/GDPR compliance.

C. Infrastructure as Code (IaC) & Containerization

• Terraform / AWS CDK: Must write production-grade, modular IaC templates from scratch—enforcing network topology and security guardrails directly in code.
• Container Orchestration: Hands-on setup and management of AWS ECS (Fargate) or EKS (Kubernetes) and automated CI/CD pipelines (GitHub Actions, GitLab CI).

D. Architecture Documentation & Systems Mapping

• Technical Documentation: Ability to author clean, standardized architecture diagrams (e.g., C4 model, Draw.io, Lucidchart) and maintain comprehensive runbooks, incident response plans, and compliance documentation.

2. Secondary Competency (Strong Advantage, Not Mandatory)

• Backend Software Development: Hands-on experience or a background in writing/debugging backend code in Node.js, Python, or Go.
• Note: The primary responsibility is cloud infrastructure, security, and automation. However, the ability to read backend code, debug API bottlenecks, or assist developers with microservice integrations is a major bonus.