Accountabilities:
The SAP Access Control Engineer will be responsible for managing enterprise SAP security solutions, ensuring appropriate access controls, compliance alignment, and reliable security operations across SAP platforms.
Design, implement, and maintain SAP authorization concepts, role structures, and access models based on business requirements and least-privilege principles.
Build and manage SAP roles including master, derived, composite, and business roles across S/4HANA, ECC, and Fiori environments.
Configure and operate SAP GRC Access Control solutions, including Access Risk Analysis (ARA), Access Request Management (ARM), Business Role Management (BRM), and Emergency Access Management (EAM).
Perform segregation-of-duties analysis, identify access risks, and support remediation efforts with business process owners and audit teams.
Manage SAP user provisioning workflows, approval processes, and integrations with identity management platforms.
Support SAP GRC Process Control activities, continuous controls monitoring, and policy compliance initiatives.
Implement and maintain security configurations for SAP Fiori, SAP BTP, and cloud-based SAP applications.
Support compliance audits including SOX, GxP, and PCI requirements by providing documentation, analysis, and remediation support.
Monitor SAP security updates, coordinate remediation activities, and collaborate with Basis and infrastructure teams.
Maintain detailed technical documentation including security designs, configurations, procedures, and operational guidelines.
Mentor junior team members and contribute to security best practices and knowledge-sharing initiatives.
Requirements:
The ideal candidate brings strong SAP security expertise, hands-on GRC experience, and the ability to collaborate across technical and business teams to deliver secure enterprise solutions.
Bachelor’s degree in Computer Science, Engineering, Information Technology, or a related technical discipline.
Five or more years of professional experience in SAP Security and SAP GRC within enterprise environments.
Strong knowledge of SAP authorization concepts, role design, and access governance methodologies.
Hands-on experience with SAP GRC Access Control modules including ARA, ARM, BRM, and EAM.
Experience supporting SAP audits, compliance reviews, and remediation activities.
Experience securing SAP Fiori applications, SAP BTP environments, and cloud-based SAP solutions.
Familiarity with SAP Identity Management or third-party identity governance and administration tools.
Working knowledge of SAP GRC Process Control and continuous compliance monitoring.
Understanding of regulatory frameworks such as SOX, GxP, and PCI.
Strong analytical, troubleshooting, documentation, and communication skills.
Preferred experience with SAP Security or GRC certifications, SAP Cloud Identity services, HANA security, SCIM integrations, SAP RISE/Grow security models, or similar enterprise security frameworks.
Benefits:
Competitive annual salary range of $100,000–$150,000.
Fully remote work opportunity within the United States.
Full-time direct employment opportunity.
Opportunity to work on complex enterprise SAP security environments.
Career growth potential within cloud, enterprise technology, and cybersecurity domains.
Exposure to modern SAP platforms including S/4HANA, BTP, Fiori, and identity management solutions.
Collaborative environment focused on innovation, technical excellence, and professional development.
How Jobgether works:
We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.
We appreciate your interest and wish you the best!
Why Apply Through Jobgether?
Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.
#LI-CL1