Job Summary
We are seeking an experienced SAP Security & GRC professional to protect and strengthen the organization's SAP environment through effective security architecture, identity and access management, governance, risk, and compliance practices. The role will focus on implementing user-access controls, conducting technology audit testing, remediating findings, evaluating security risks associated with new technologies and system enhancements, and supporting compliant SAP operations within a large enterprise environment. The ideal candidate will collaborate closely with SAP application, infrastructure, security, audit, technical, and business teams.
Key Responsibilities
• Perform technology audit testing in accordance with company policies and established procedures.
• Document and submit audit findings as assigned.
• Develop and execute remediation plans to address audit findings and identified security risks.
• Implement and maintain SAP user-access controls, roles, authorizations, and provisioning processes.
• Configure SAP systems to mitigate organizational security and compliance risks.
• Support SAP Governance, Risk and Compliance activities, including access governance and control monitoring.
• Create standardized processes and templates for implementing SAP features.
• Develop technical documentation, security standards, and development templates within the assigned domain.
• Promote alignment of security and development practices across SAP systems and application teams.
• Evaluate emerging SAP technologies and solutions for security, access, and compliance risks.
• Recommend appropriate controls and mitigation strategies for newly identified technology risks.
• Coordinate system, platform, and network enhancements in accordance with corporate standards and user-access policies.
• Partner with technical teams, business stakeholders, auditors, and security personnel to support compliant SAP operations.
Required Qualifications
• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Engineering, or a related field.
• 8+ years of relevant experience in enterprise technology, SAP security, identity and access management, audit, compliance, or a related discipline.
• Strong understanding of security architecture and configuration within the SAP platform.
• Experience with SAP security roles, authorizations, user provisioning, and access controls.
• Knowledge of SAP HANA Extended Application Services, Advanced Model (XSA).
• Working knowledge of SAP Governance, Risk and Compliance, including SAP GRC concepts and controls.
• Experience conducting technology audit testing and remediating audit findings.
• Knowledge of Identity and Access Management principles, including establishing credentials for users, applications, and devices.
• Experience applying credentials to control access to enterprise systems and applications.
• Experience implementing access policies and appropriate authorization controls.
• Experience identifying technology risks and developing practical mitigation strategies.
• Ability to create clear technical processes, standards, templates, and documentation.
• Experience coordinating enhancements across enterprise systems, platforms, applications, or networks.
• Strong analytical, organizational, written communication, and cross-functional collaboration skills.