SAP GRC Consultant

Job Category: SAP GRC Consultant
Job Type: Remote
Compensation: Depends on Experience
W2: W2-Contract Only; Kindly note that applications on a C2C basis will not be considered for this role.

Job Description:

We are seeking a highly experienced SAP GRC Consultant with 10+ years of SAP security and GRC experience to support enterprise SAP environments in a highly secure government/defense environment. The ideal candidate will have strong expertise in SAP Governance, Risk, and Compliance, SAP Security, access controls, role design, risk analysis, and compliance processes.

Top Secret security clearance is required.

Key Responsibilities
  • Design, implement, configure, and administer SAP Governance, Risk, and Compliance (GRC) solutions across complex SAP environments.
  • Develop and maintain SAP GRC Access Control solutions, including Access Risk Analysis (ARA), Access Request Management (ARM), Business Role Management (BRM), and Emergency Access Management (EAM/Firefighter).
  • Perform Segregation of Duties (SoD) analysis, critical access analysis, risk remediation, and mitigation.
  • Design and maintain SAP roles, profiles, authorizations, and security models across SAP ECC, S/4HANA, and related SAP applications.
  • Configure and manage SAP GRC workflows, approval processes, risk rules, access requests, and business roles.
  • Conduct periodic user access reviews, role reviews, privileged access reviews, and compliance assessments.
  • Integrate SAP GRC with SAP systems and supporting enterprise applications.
  • Troubleshoot SAP security and GRC issues and provide root-cause analysis and remediation.
  • Support SAP security audits and regulatory/compliance requirements.
  • Develop and maintain security controls, policies, procedures, and technical documentation.
  • Collaborate with SAP functional teams, application owners, auditors, compliance teams, and infrastructure/security teams.
  • Support SAP implementations, upgrades, migrations, patches, and production deployments from a security and GRC perspective.
  • Monitor and remediate unauthorized, excessive, or conflicting access.
  • Develop reports and dashboards for access risk, compliance, audit findings, and remediation status.
  • Support continuous improvement of SAP security and GRC processes in accordance with enterprise security standards.
  • Work within strict security protocols and requirements associated with classified or sensitive environments.
Required Qualifications
  • 10+ years of hands-on SAP Security and SAP GRC experience.
  • Strong experience with SAP GRC Access Control 10.x/12.x.
  • Expertise in ARA, ARM, BRM, EAM/Firefighter, and SoD controls.
  • Strong knowledge of SAP authorization concepts, role administration, profiles, and security architecture.
  • Experience with SAP ECC and/or SAP S/4HANA security.
  • Experience configuring GRC workflows, rulesets, access requests, and risk analysis.
  • Strong understanding of SAP security integration and authentication concepts.
  • Experience supporting SAP audits, compliance assessments, and remediation activities.
  • Strong analytical, troubleshooting, and problem-solving skills.
  • Excellent documentation and communication skills.
  • Experience working in highly regulated or government environments is highly preferred.
  • Active Top Secret security clearance is required.
Preferred Qualifications
  • SAP GRC certification or SAP Security certification.
  • Experience with SAP S/4HANA, Fiori security, and embedded analytics.
  • Knowledge of SAP Identity Management and enterprise IAM integrations.
  • Experience with Active Directory, LDAP, SSO, and identity provisioning.
  • Knowledge of NIST, RMF, FISMA, FedRAMP, or other government security/compliance frameworks.
  • Experience supporting classified or defense-related SAP environments.
  • Familiarity with SAP Cloud solutions and SAP BTP security is a plus.
Clearance Requirement

Active Top Secret security clearance is mandatory. Candidates must be able to work in accordance with applicable government security and information-handling requirements.

Experience

10+ years of SAP Security / SAP GRC experience, with demonstrated expertise in enterprise SAP access governance, risk management, compliance, and security administration.