SAP Security & GRC Analyst

SAP Security & GRC Analyst (Hands-On Configuration Role)

We are seeking an experienced SAP Security & GRC Analyst to support a SOX uplift initiative across SAP ERP, IS-U, and BPC environments. This is a technical, hands‑on role focused on SAP GRC Access Control configuration, security role remediation, and preventive SoD implementation
—not an audit‑only or advisory position.

• Configure SAP GRC Access Control (ARA, ARM, BRM, EAM) including ruleset updates, transports, and testing
• Implement preventive SoD checks and integrate them into user provisioning workflows
• Perform hands‑on SAP security role and authorization remediation (PFCG)
• Review and resolve SoD risks at role and user levels across systems
• Configure and maintain mitigating controls within GRC
• Use SUIM, SU53, ST01 to troubleshoot authorization issues
• Support audits with system-level evidence and documentation

• 5+ years of hands‑on SAP Security & GRC experience
• Strong experience with SAP GRC Access Control 11.0 / 12.0
• Deep understanding of SAP Security for ERP, IS-U, and BPC
• Proven SoD analysis, remediation, and control configuration experience
• SOX and compliance framework knowledge

• SAP GRC certification
• Utilities or energy industry experience

🚫 Not an advisory, documentation-only, or audit testing role

✅ Direct SAP GRC and SAP Security configuration required