Lead Specialist - IT SAP GRC/Security

Energy Transfer; Houston (TX); On-site; USD 140,000 - 180,000; Full time

Benefits offered by this job

401(k) match

PTO

Profit sharing

Job summary

Energy Transfer is seeking a Lead Specialist - IT SAP GRC/Security based in Houston to manage SAP security, GRC and SOX controls. The role requires extensive SAP GRC/Security experience and the ability to lead cross-functional teams across IT and business users.

Responsibilities include defining security architecture, troubleshooting production issues, and delivering training while ensuring compliance with internal controls and SOX requirements. Regular travel may be required.

Qualifications

• Bachelor’s degree or equivalent required.
• 5–8+ years of SAP GRC/Security experience including at least one SAP greenfield project.

Responsibilities

• Lead SAP GRC/Security initiatives and SME for SAP Security and GRC.
• Provide production support and 24x7 SAP security troubleshooting.
• Develop and implement SAP security policies and controls.
• Deliver training and conduct workshops for IT and business users.
• Coordinate SOX controls and audit remediation within SAP environments.

Skills

SAP GRC/Security

SOX compliance

Project management

SAP S/4HANA Security

Fiori

Education

Bachelor's degree in Computer Science or Accounting

Tools

SailPoint IdM

MSMP/BRF+

SAP GRC Access Control

Job description

Job Description - Lead Specialist - IT SAP GRC/Security (2610003056)

Job Description

Lead Specialist - IT SAP GRC/Security - ( 2610003056 )

We value all of our employees who make our growth and success possible. We are proud to offer industry leading compensation, comprehensive benefits, 401(k) match with additional profit sharing, PTO and abundant career opportunities.

Come join our award winning 12,000 strong organization as we fuel the world and each other!

Summary:

IT SAP Security/GRC Lead Specialist: Responsible for managing and providing SAP support to Energy Transfer users within functional and technical areas of expertise. This includes interacting with users to understand requirements, evaluating alternative solutions, resolving problems/issues, developing training materials, providing user training, communicating status and documenting system changes (e.g. new reports and functionality) to the appropriate business levels in the organization.

Essential Duties and Responsibilities:

• Project Management:
  
  
  
  • Plans, directs and coordinates activities in order to ensure project goals are accomplished within defined constraints.
  
  
  • Identifies and schedules project deliverables, milestones, and required tasks.
  
  
  
  

Problem Resolution:

Research production problems and/or enhancement issues and make appropriate configuration changes to the system. Initiate action and evaluate issues to develop alternative solutions. Apply expert knowledge and experience to resolve problems.

Conduct day-to-day troubleshooting and break-fix activities. Provide telephone support to share in the 24x7 365-day support of SAP production system.

Act as the Subject Matter Expert (SME) lead for all SAP Security and GRC modules including but not limited to S4, Fiori, BPC 11.0, O-BPC, E HANA, Solman, GRC 12 components EAM, ARA, ARM and BRM

Continuous Improvement and Efficiency Projects:

Develop and implement SAP security policies, architecture and processes. This function includes identifying SAP security solutions, implementing standards and best practices, identifying and remediating vulnerabilities and other associated compliance activities.

Experience and strong understanding of internal controls, security practices and a working knowledge of S4 and Fiori configuration, functionality and SAP GRC for Controls and SOD resolution strategies to enable the business process transformation needs.

Understands and Applies Sarbanes Oxley compliance knowledge in internal controls/business process controls design, development, testing, implementation, support, and documentation of a Risk and Controls Matrix for the S4 SAP environment.

Thinks strategically as the future internal controls/business process controls design is built

Translate business requirements into a robust security model for SAP S/4 HANA, BPC, E-HANA, Fiori, PO, GRC implementation in accordance with the overall business and IT strategy.

• Develop and conduct SAP training and knowledge transfer to business clients.


• Proactively train other IT resources further develop their understanding of SAP application configuration and business processes.

SOX Compliance:

• Ensure that changes/enhancements are completed using appropriate SOX control processes. Recommend/implement SOX change control process changes as necessary.

Required Skills

Requirements:

Education and/or Experience, Knowledge, Skills & Abilities:

To perform this job successfully, an individual must be able to perform each essential job duty satisfactorily. The requirements for this position are listed below:

• Bachelor’s degree in Computer Science or Accounting or equivalent work experience plusexperience related to the applicable level.


• Experience shouldinclude2 SAP full project life cycle implementations, and SAP Security design and implementation experience with at least 1 SAP greenfield project implementation experience

2-3 years of GRC 10.1/12 Access Control implementation experience with at least 1 new implementation experience

Administration/Troubleshooting complex security issues related to S4 HANA, BPC, O-BPC, ChaRM, E-HANA Security, Fiori catalogs, groups and configure security roles

Configure GRC SOD Rule Set and work with the compliance team to test, evaluate the effectiveness of SOD’s and mitigation controls.

Experience with Integrating SAP with SailPoint IdM is preferred

Should be well versed working with internal and external auditors and remediate gaps from IT/SAP audits

Should be able to lead Customer Workshops and Presentations Independently

Responsible for the effectiveness of SAP Security Controls (Emergency Access, SOD Compliance, etc.) and addressing audit findings in SAP environments

Deep expertise in implementing the various modules of GRC Access Control – ARA, ARM, EAM, BRM along with complex workflow layouts using MSMP and BRF+

Implementation experience with GRC Process Control module and integration with Access Control is preferred

Required experience is commensurate with the selected job level:

• The Senior IT Specialist level requires a Bachelor’s degree or equivalent experience and 5-8 years of relevant job related experience


• The Lead IT Specialist level requires a Bachelor’s degree or equivalent experience and 8+ years of relevant job related experience


• The Principal IT Specialist level requires a Bachelor's degree or equivalent experience and 10+ years of relevant job related experience.

Preferred Qualifications:

Knowledge of oil and gas industry is a plus

GRC certification is preferred

Working Conditions:

• Usually, normal office working conditions.


• Must be be able to remain in a stationary position 50% of the time due to prolonged periods of sitting or standing.


• Occasional overnight travel may be required.


• Occasional visits to industrial/manufacturing settings, which may include exposure to various materials and chemicals, as well as extreme temperature conditions and loud machinery, and require appropriate personal protective equipment.

#LI-CK1

Primary Location

United States-TX-HOUSTON

Work Locations

Houston TX 1300 Main (100000189) 1300 Main Street Houston 77002

Job

Information Technology

Organization

Schedule

Regular

Full-time

Travel

Yes, 10 % of the Time

Job Posting

Aug 7, 2026, 2:23:49 AM

Energy Transfer is an equal opportunity employer and does not discriminate against qualified applicants on the basis of any actual or perceived legally protected characteristics under federal, state, or local law. To view a notice describing federal equal opportunity laws .click here

If, because of a medical condition or disability, you need a reasonable accommodation for any part of the application process, please contact the EEO Coordinator at 713-989-2247. This number is for reasonable accommodation requests only.