We are seeking an
SAP GRC Security - Application Business Architect to support SAP Governance, Risk, and Compliance (GRC) and Security activities across SAP environments. This role will support risk identification, controls, security administration, audit readiness, and compliance activities while partnering with SAP technical, functional, and business teams.
Your Role About the Job You're ConsideringSAP GRC & Security Consultant - Access Control, Process Control, S/4HANA & BTP Security
We are looking for an experienced SAP GRC and Security professional with strong hands-on expertise across SAP GRC Access Control, Process Control, SAP S/4HANA Security, SAP Cloud Security, and SAP BTP Security. The role will focus on designing, configuring, implementing, and supporting secure and compliant SAP environments across cloud and on-premise landscapes.
The ideal candidate will have experience with SAP GRC 12.0, GRC for HANA 2026, S/4HANA, BTP Security, Cloud Identity Services, IAM/IGA, access governance, risk management, and compliance.
Your RoleDesign, configure, implement, and support SAP GRC Access Control and Process Control solutions.
Manage ARA, ARM, EAM, BRM, Segregation of Duties (SoD), risk analysis, mitigation, and access governance.
Configure and support MSMP workflows, BRF+, approval processes, connectors, synchronization, and user provisioning.
Support Process Control capabilities including internal controls, risk and control management, control assessments/testing, issue management, remediation, continuous control monitoring, compliance, and certification.
Design and support SAP S/4HANA security, including roles, authorization objects, organizational values, user administration, and troubleshooting.
Support SAP Fiori Security, including front-end and back-end authorization.
Design and implement SAP BTP Security, including Global Accounts, Directories, Subaccounts, users, role collections, application roles, and authorizations.
Configure and support SAP Cloud Identity Services, including Identity Authentication and Identity Provisioning.
Support authentication, authorization, identity federation, SSO, IAM/IGA, and cloud/on-premise security integration.
Partner with Role Owners, Business Process Owners, Internal Audit, Compliance, Security, application, and technical teams to address security and access risks.
Participate across the implementation lifecycle, including requirements gathering, design, configuration, SIT, UAT, cutover, go-live, and hypercare.
Your Skills and Experience Strong hands-on experience with SAP GRC 12.0 Access Control and SAP GRC for HANA 2026.
Strong experience with SAP GRC Process Control.
Expertise in ARA, ARM, EAM, BRM, SoD, access risk management, and remediation/mitigation.
Hands-on experience with MSMP workflow and BRF+ configuration.
Strong knowledge of SAP S/4HANA Security, SAP Security, authorizations, and role design.
Experience with SAP Fiori Security and front-end/back-end authorization concepts.
Hands-on knowledge of SAP BTP Security, role collections, application roles, and authorization management.
Experience with SAP Cloud Identity Services, Identity Authentication, and Identity Provisioning.
Understanding of IAM, IGA, identity lifecycle management, SSO, federation, and access governance.
Experience integrating SAP cloud and on-premise environments and establishing secure connectivity.
Experience with GRC master data, organizational structures, reporting, compliance monitoring, and GRC integration.
Strong understanding of SAP business processes, security controls, audit, risk, and compliance requirements.
Strong troubleshooting, analytical, communication, and stakeholder-management skills.
The base compensation range for this role in the posted location is: $101,140 - $182,624
Capgemini provides compensation range information in accordance with applicable national, state, provincial, and local pay transparency laws. The base compensation range listed for this position reflects the minimum and maximum target compensation Capgemini, in good faith, believes it may pay for the role at the time of this posting. This range may be subject to change as permitted by law.
The actual compensation offered to any candidate may fall outside of the posted range and will be determined based on multiple factors legally permitted in the applicable jurisdiction.
These may include, but are not limited to: Geographic location, Education and qualifications, Certifications and licenses, Relevant experience and skills, Seniority and performance, Market and business consideration, Internal pay equity.
It is not typical for candidates to be hired at or near the top of the posted compensation range.
In addition to base salary, this role may be eligible for additional compensation such as variable incentives, bonuses, or commissions, depending on the position and applicable laws.
Capgemini offers a comprehensive, non-negotiable benefits package to all regular, full-time employees. In the U.S. and Canada, available benefits are determined by local policy and eligibility and may include:
- Paid time off based on employee grade (A-F), defined by policy: Vacation: 12-25 days, depending on grade, Company paid holidays, Personal Days, Sick Leave
- Medical, dental, and vision coverage (or provincial healthcare coordination in Canada)
- Retirement savings plans (e.g., 401(k) in the U.S., RRSP in Canada)
- Life and disability insurance
- Employee assistance programs
- Other benefits as provided by local policy and eligibility
Important Notice: Compensation (including bonuses, commissions, or other forms of incentive pay) is not considered earned, vested, or payable until it becomes due under the terms of applicable plans or agreements and is subject to Capgemini's discretion, consistent with applicable laws. The Company reserves the right to amend or withdraw compensation programs at any time, within the limits of applicable legislation.
