Address
Form of workWe are seeking a skilled SAP Security and GRC Consultant to take charge of our Security and controls team, ensuring the delivery and upkeep of solutions tailored to our client's intricate requirements. The ideal candidate will be an adept manager who actively engages in hands-on tasks, possessing comprehensive knowledge of SAP and GRC to work autonomously effectively. Experience in managing SAP and GRC tools within a cloud environment, coupled with the ability to articulate cloud security design/architecture concepts to both technical and non-technical client stakeholders, is crucial.
- TS/SCI with Poly Required
- Minimum of 4 years of experience managing SAP application Security and SAP GRC Access Control across the client's SAP landscape, spanning development to production.
- Profound understanding of SAP authorization concepts for SAP ECC, SAP S/4 HANA systems, and SAP GRC Access Control (10.x and 12.x).
- Expertise in Security/GRC implementation and maintenance, encompassing minor enhancements and support pack/version upgrades.
- Hands-on experience with GRC master data creation and maintenance, conducting risk analysis and remediation activities, batch job monitoring, and audit & compliance support activities (user management controls, access certification, etc.). Proficiency in BRF+ and MSMP workflows is essential.
- Continuous awareness of the latest developments in SAP ECC, S/4 HANA, and emerging security authorization concepts.
- Familiarity with NIST, SOX, SOD, and SAP IT General Computer Controls, understanding how these compliance requirements impact security, and providing effective solutions to address them.
- Experience in supporting, developing, and mentoring junior team members.
- Ability to troubleshoot security access issues efficiently, collaborating with key functional/business stakeholders as needed to resolve SAP Security/GRC errors/exceptions.
- Knowledgeable about application security vulnerabilities and capable of proposing solutions to eliminate and/or mitigate associated risks.
- Willingness to provide SAP security technical training to client counterparts as required
All qualified applicants will receive consideration for employment without regard to race, color, sex, sexual orientation, gender identity, religion, national origin, disability, veteran status, age, marital status, pregnancy, genetic information, or other legally protected status.
