This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior SAP Security & GRC Engineer based in United States.
The Senior SAP Security & GRC Engineer will design, implement, and operate security and governance frameworks across complex enterprise SAP environments.
The role spans S/4HANA, ECC, BW/4HANA, Fiori, BTP, SuccessFactors, and related cloud technologies.
You will play a critical role in protecting sensitive systems through robust authorization models, access controls, and least-privilege principles.
The position combines hands-on SAP GRC engineering with segregation-of-duties analysis, provisioning, audit support, and compliance activities.
You will collaborate closely with business process owners, internal audit, Basis, DBA, IAM, and other technology teams.
This is an opportunity to strengthen a secure, compliant, and highly auditable SAP landscape while contributing to continuous security improvements.
The role is fully remote and suited to an experienced SAP security professional who enjoys solving complex enterprise challenges and sharing expertise with others.
Accountabilities:
- Design, implement, and maintain SAP authorization concepts and role structures aligned with business processes, security policies, and least-privilege principles.
- Build and manage master, derived, composite, and business roles across S/4HANA, ECC, and Fiori environments.
- Configure and operate SAP GRC Access Control, including Access Risk Analysis (ARA), Access Request Management (ARM), Business Role Management (BRM), and Emergency Access Management (EAM).
- Manage GRC rulesets, mitigating controls, emergency access processes, and access governance workflows.
- Perform segregation-of-duties analysis and coordinate remediation activities with business process owners, compliance teams, and internal audit.
- Configure user provisioning workflows in SAP GRC ARM, including request types, approval paths, and integrations with IAM/IGA platforms.
- Operate SAP GRC Process Control to support continuous controls monitoring and policy management.
- Implement and maintain security configurations for SAP Fiori applications, including catalogs, groups, and front-end authorizations.
- Configure and operate security for SAP BTP and cloud applications using technologies such as XSUAA, IAS, and IPS.
- Support SOX, GxP, PCI, and other SAP security audits, including evidence collection, finding remediation, and maintenance of documented remediation plans.
- Implement transport security, table logging, audit logging, and other controls in accordance with enterprise security policies.
- Monitor SAP Security Notes and coordinate remediation with Basis, DBA, and other technical teams.
- Maintain comprehensive technical documentation, including architecture diagrams, configuration references, design decisions, runbooks, and operational procedures.
- Mentor junior security professionals and facilitate knowledge transfer to strengthen the broader SAP security capability.
Requirements:
- Bachelor’s degree in Computer Science, Engineering, or a related technical discipline.
- 5+ years of hands-on SAP Security and GRC experience within complex enterprise SAP environments; the position indicates 10+ years of overall experience as preferred.
- Deep knowledge of SAP authorization concepts, security architecture, and enterprise role design.
- Strong hands-on experience with SAP GRC Access Control, particularly ARA, ARM, BRM, and EAM.
- Demonstrated experience conducting segregation-of-duties analysis, managing mitigating controls, and resolving access risks.
- Experience supporting SAP audits and developing or executing remediation plans.
- Hands-on experience securing SAP Fiori, SAP BTP, and cloud-based SAP applications.
- Familiarity with SAP IDM and/or third-party identity governance and administration platforms.
- Working knowledge of SAP GRC Process Control and continuous controls monitoring.
- Strong understanding of regulatory and compliance frameworks, including SOX, GxP, and PCI.
- Excellent analytical, communication, documentation, and stakeholder-management skills.
- Ability to work independently in a remote environment while collaborating effectively with technical, business, audit, and compliance stakeholders.
- U.S. work authorization is required; U.S. Citizens, Green Card Holders, EAD Holders, and candidates eligible for H-1B transfer are encouraged to apply. New H-1B visa sponsorship is not available.
Benefits:
- Salary: $100,000–$150,000 annually, depending on experience and qualifications.
- Work arrangement: 100% remote within the United States.
- Employment type: Full-time, direct W2 position.
- Opportunity to work on complex enterprise SAP security and governance environments.
- Exposure to S/4HANA, ECC, BW/4HANA, Fiori, BTP, SuccessFactors, and modern IAM technologies.
- Career growth opportunities within an established technology consulting and software development environment.
- Opportunity to mentor team members and expand technical leadership experience.
- Collaborative work with SAP, security, audit, compliance, business, and infrastructure professionals.
- Equal employment opportunity environment committed to fair and inclusive employment practices.
How Jobgether works:
We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.
We appreciate your interest and wish you the best!
Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.
#LI-CL1
