SAP Security Specialist

Job Description: This role is for an SAP GRC Engineer / Admin

The following details required and desired skills for this position:

SAP GRC Suite Expertise

" Business Process, Risk/Ruleset management, and Process Controls Development and Management

" Hands-on experience of leading the business through risk analysis and remediation

" Deep knowledge of SAP GRC components: Access Control (AC), Process Control (PC), Risk Management (RM), and Audit Management (AM)

" Experience configuring and maintaining GRC solutions (role design, SoD rules, workflow setup, remediation)

Access Control (AC)

" Designing, testing, and maintaining composite and single roles

" Managing SoD matrices, risk analysis, and remediation projects

" Using tools such as Access Risk Analyzer (ARA), Role Manager, and Business Role Builder

Engineering Methodology

" Experience with standard engineering process

" Background in doing requirements discovery and translation from business requirements to technical requirements / deliverable

" Experience with software systems design

Process Control & Risk Management

" Building internal controls, monitoring plans, and audit workpapers

" Configuring continuous control monitoring (CCM) and KPI dashboards

" Conducting risk assessments and documenting control effectiveness

Compliance & Audit

" Understanding of regulatory frameworks (SOX, GDPR, ISO 27001, FISMA, etc.)

" Ability to generate auditready reports and evidence

" Coordination with internal and external auditors

SAP Basis & Integration

" Fundamentals of SAP NetWeaver, S/4HANA, and system landscape management

" Transport management (CTS) for GRC objects

" Integration with SAP Identity Management (IdM) and thirdparty IAM solutions

Technical Tools & Scripting

" Proficiency with GRC configuration tools (PFCG, GRAC, GRPC, GRRM)

" Basic ABAP debugging for securityrelated enhancements

" Automation scripts (PowerShell, Python, Bash) for user provisioning and report generation

Security Incident Management

" Monitoring GRC alerts, handling violations, and executing remediation steps

" Collaboration with SAP Basis and IT security teams for patches and hardening

Project & Change Management

" Experience leading GRC implementation or upgrade projects (Agile or Waterfall)

" Managing change requests, documentation, and stakeholder communication

Data Analysis & Reporting

" Building regular SoD, risk, and compliance reports (using SAP GRC reporting, Excel, Power BI)

" Analyzing large userrole datasets to identify anomalies

Communication & Training

" Clear documentation of GRC policies, procedures, and role designs

" Conducting training sessions for functional users and auditors

" Liaising with business owners, security teams, and IT partners

Soft Skills

" Strong analytical and problemsolving abilities

" High attention to detail and accuracy

" Proactive attitude and willingness to stay current with GRC best practices and regulatory changes