SAP Security and GRC Consultant

$85-$90 per hour

Omaha, NE

Contract

SAP Security SME with BTP and Workzone Cloud Implementations

• Previous experience in SAP security design and architecture and basis or development role.
• Hands‑on experience with SAP cloud implementations, specifically SAP BTP (Business Technology Platform) and Work Zone.
• Experience supporting or leading SAP transformations from on‑premise environments to cloud‑based architectures.
• Experience working on end‑to‑end SAP implementations or migrations from on‑premise to cloud environments.
• Experience with SAP cloud security frameworks and identity/access governance in BTP environments.
• Proficient understanding of SAP systems, identity management, auditing tools, modules, and their integration points to effectively manage and control user access.
• Working and security knowledge tied to SAP vulnerability assessment and management, system monitoring, SIEM and threat management, masking, encryption.
• Working knowledge of SoD (Segregation of Duties) analysis, sensitive transactions analysis, SAP development (includes ABAP), SAP modules, Solution Manager and transport system, basis component, Net Weaver, SAP GUI, and portals.
• Understanding of RFC connections, Fiori and Workzone security for top‑down business role and design.
• Strong knowledge of information security principles, frameworks and data protection laws to ensure compliance with the organization’s information security policies.
• Bachelor’s degree in information technology, Computer Science, or a related field.

• CISSP, other security certification, or SAP security certification.

• SME level, 15+ years of experience in SAP Security and GRC.

• The candidate is expected to work onsite

• Designing and implementing security solutions in SAP environments.
• Should have expertise in SAP architecture, role management, access control, and authorization objects.
• Works closely with SAP Basis and development teams to ensure patches are implemented on time and code deployment is tested for security.
• Monitor and perform SOX controls as they relate to SAP Security and GRC.
• Understand security policies, document processes, incidents, and security controls.
• Very good analytical skills and problem‑solving ability are a must.
• Very good communication skills.
• Knowledge of Agile development methodology is a plus.
• Must be capable of doing code reviews and mentoring junior developers to drive high-quality deliverables.
• Strong background and culture of delivering projects with first‑time‑right / zero defects in production.