SAP GRC Specialist
Sugar Land, Fort Bend County, Texas, 77479, USA
Listed on 2026-10-29
-
IT/Tech
SAP Consultant, Information Security & Data Protection
Bright Vision Technologies is a forward-thinking software development company dedicated to building innovative solutions that help businesses automate and optimize their operations. We leverage cutting-edge technologies to create scalable, secure, and user-friendly applications.
As we continue to grow, we’re looking for a skilled SAP GRC Specialist to join our dynamic team and contribute to our mission of transforming business processes through technology.
This is a fantastic opportunity to join an established and well-respected organization offering tremendous career growth potential.
Job Title: SAP GRC Specialist
Location: 100% Remote (Continental United States)
Position Type: In-house Bright Vision Technologies SOW engagement (no third-party client or vendor)
Salary
: $150K - $185K
Experience: 5+ years
Employment Terms & Visa PolicyThis is a 100% remote, full-time, direct W2 position with Bright Vision Technologies.
This role is part of Bright Vision Technologies’ in-house Statement of Work (SOW) engagement. The client, end customer, and employer for this position is Bright Vision Technologies — there is no third-party client, vendor, or implementation partner involved.
We do not engage in C2C, 1099, or third-party arrangements for this role. Candidates must be willing to work directly as a full-time W2 employee of Bright Vision Technologies and contribute to our in-house SOW deliverables.
No new H1B sponsorship is available for this role. However, candidates who are currently on a valid H1B visa and require a transfer are welcome to apply. We will support H1B transfers for qualified candidates.
For every role, a technical coding assessment is mandatory. Please apply only if you are confident in your technical abilities and hands-on experience.
Job SummaryWe are seeking an experienced SAP GRC Specialist to design, implement, and operate security and access-control frameworks for complex SAP landscapes, including S/4
HANA, ECC, BW/4
HANA, Fiori, BTP, and Success Factors. In this role you will be responsible for SAP role design, user provisioning, segregation-of-duties analysis, audit support, and the technical operation of SAP GRC suites. The ideal candidate will combine deep expertise in SAP authorization concepts with strong hands-on experience operating SAP GRC Access Control and Process Control, and will partner closely with audit, compliance, and business teams to deliver a secure, auditable SAP environment.
- Design and maintain SAP authorization concepts and role structures aligned with business processes and least-privilege principles.
- Build and maintain master, derived, composite, and business roles for S/4
HANA, ECC, and Fiori applications. - Configure and operate SAP GRC Access Control (ARA, ARM, BRM, EAM), including ruleset management, mitigating controls, and emergency access management.
- Perform segregation-of-duties analysis and remediation in collaboration with business process owners and internal audit.
- Configure user provisioning workflows in SAP GRC ARM, including request types, approval paths, and integration with IDM/IAM platforms.
- Operate SAP GRC Process Control for continuous controls monitoring and policy management.
- Implement security for Fiori applications, including catalogs, groups, and front-end authorizations.
- Configure and operate security for SAP BTP and cloud applications using XSUAA, IAS, and IPS.
- Support SAP audits (SOX, GxP, PCI) and respond to audit findings with documented remediation plans.
- Implement transport security, table logging, and audit logging in line with internal security policies.
- Monitor and remediate SAP Security Notes in coordination with Basis and DBA teams.
- Maintain comprehensive, current technical documentation — including…
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).