SAP Security & GRC Engineer

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a SAP Security & GRC Engineer based in United States.

This is a senior SAP security role focused on designing, implementing, and operating secure access-control frameworks across complex enterprise SAP landscapes. You will work across S/4HANA, ECC, BW/4HANA, Fiori, BTP, and SuccessFactors to strengthen authorization, identity, governance, and compliance. The role combines hands-on SAP security engineering with GRC operations, role design, user provisioning, and segregation-of-duties analysis. You will also support audits and remediation efforts while helping maintain a secure and highly auditable SAP environment. Close collaboration with audit, compliance, business, and technical teams will be central to your work. This fully remote opportunity offers meaningful responsibility and the chance to contribute to enterprise-scale security and governance initiatives.

Accountabilities:

• Design, implement, and operate SAP security and access-control frameworks across complex SAP environments, including S/4HANA, ECC, BW/4HANA, Fiori, BTP, and SuccessFactors.
• Develop and maintain SAP roles and authorization models while applying strong principles of least privilege, segregation of duties, and secure access management.
• Operate and support SAP GRC Access Control capabilities, including Access Risk Analysis (ARA), Access Request Management (ARM), Business Role Management (BRM), and Emergency Access Management (EAM).
• Manage user provisioning and access processes while ensuring that permissions are appropriately controlled, documented, and aligned with business and compliance requirements.
• Perform segregation-of-duties analysis, investigate access risks, and support remediation activities across SAP environments.
• Support internal and external SAP security audits by providing documentation, evidence, analysis, and remediation support.
• Secure SAP Fiori, BTP, and cloud-based SAP applications while addressing identity, authorization, and access-control requirements.
• Support SAP Process Control activities and contribute to continuous improvements in governance, risk management, and control effectiveness.
• Partner with audit, compliance, business, and technical stakeholders to communicate security requirements, resolve access-related issues, and maintain strong documentation.
• Contribute to security improvements involving SAP Cloud Identity services, HANA security, identity integrations, and evolving SAP cloud operating models where applicable.

Requirements:

• Hold a bachelor’s degree in Computer Science, Engineering, or a related technical discipline, with at least 5 years of SAP Security or GRC experience in enterprise environments.
• Bring strong hands-on expertise in SAP authorization concepts, role design, access controls, and security administration across complex SAP landscapes.
• Demonstrate deep practical experience operating SAP GRC Access Control, particularly ARA, ARM, BRM, and EAM.
• Have experience supporting SAP security audits, identifying access risks, and driving or supporting remediation activities.
• Possess hands-on experience securing SAP Fiori, BTP, and cloud-based SAP applications.
• Have familiarity with SAP IDM or third-party Identity Governance and Administration (IGA) technologies and understand how identity and access processes integrate with SAP environments.
• Demonstrate working knowledge of SAP Process Control and regulatory frameworks such as SOX, GxP, and PCI.
• Possess strong communication, documentation, analytical, and problem-solving skills, with the ability to collaborate effectively across technical, audit, compliance, and business teams.
• SAP Security or GRC certification is preferred, along with experience using SAP Cloud Identity services such as IAS and IPS and SCIM-based integrations.
• Familiarity with HANA security, analytic privileges, continuous controls monitoring frameworks, and SAP RISE or Grow security operating models is advantageous.
• Be eligible to work in the United States; U.S. Citizens, Green Card Holders, EAD Holders, and H-1B transfer candidates are encouraged to apply. New H-1B visa sponsorship is not available for this position.

Benefits:

• Annual salary range of $100,000-$125,000 USD.
• Full-time, direct W2 employment.
• 100% remote work within the United States.
• Opportunity to work on complex SAP security and GRC environments spanning S/4HANA, ECC, BW/4HANA, Fiori, BTP, and SuccessFactors.
• Exposure to enterprise security, regulatory compliance, audit, identity governance, and SAP cloud technologies.
• Opportunities for continued professional growth through hands-on work with SAP security, GRC, cloud identity, and emerging SAP operating models.