SAP GRC Security Analyst - Remote

AMARIS GROUP SA; Madrid; Hybrid; EUR 42,000 - 64,000; Full time

Benefits offered by this job

Remote work options

Transit tickets

Restaurant tickets

Kindergarten support

Private health insurance

Job summary

Amaris Consulting is seeking a Cybersecurity GRC Analyst (SAP focus) to join an international team. You will contribute to security governance, assess SAP security risks and ensure remediation actions align with business objectives across Operations and Finance.

The role requires 2-4 years in cybersecurity with GRC, strong SAP/GRC experience, and good English for meetings and documentation. A collaborative bridge between IT and business units is essential.

Qualifications

• 2-4 years of experience in Cybersecurity with a focus on GRC, governance or risk analysis.
• Proven experience assessing security risks for business applications.
• Ability to review CIA criteria and follow up on remediation plans.
• Experience contributing to cybersecurity clauses in contracts is a strong plus.
• Comfortable preparing security committees, KPIs and risk documentation for stakeholders.
• SAP security / SAP GRC experience is a strong plus.
• Good level of English for meetings, documentation and committees.

Responsibilities

• Support and contribute to security governance activities across the application landscape.
• Assess application security risks, especially for SAP and other key business applications.
• Review confidentiality, integrity and availability requirements and ensure appropriate controls.
• Follow up on remediation plans, tracking progress and ensuring timely closure of findings.
• Contribute to the review of cybersecurity clauses in contracts with vendors.
• Prepare and support security committees, including dashboards, KPIs and risk reports.
• Maintain and update the security status of the application portfolio.
• Act as an interface between IT owners and the RSSI/CISO, aligning on risks and controls.
• Contribute to continuous improvement of security processes, standards and documentation.

Skills

Cybersecurity

GRC

Governance

Risk analysis

SAP

SAP GRC

English proficiency

Stakeholder management

Tools

SAP

SAP GRC

Job description

Amaris Consulting is seeking a Cybersecurity GRC Analyst (SAP focus) to join an international team. You will contribute to security governance, assess SAP security risks and ensure remediation actions align with business objectives across Operations and Finance.

The role requires 2-4 years in cybersecurity with GRC, strong SAP/GRC experience, and good English for meetings and documentation. A collaborative bridge between IT and business units is essential.