Remote SAP Compliance & GRC Engineer

Bright Vision Technologies; Sterling (VA); On-site; USD 100,000 - 150,000; Full time

Job summary

Bright Vision Technologies is seeking an experienced SAP Security and GRC Engineer to design, implement, and operate security and access-control frameworks for SAP landscapes (S/4HANA, ECC, BW/4HANA, Fiori, BTP, SuccessFactors). You will manage role design, user provisioning, and audit support in a secure SAP environment.

The ideal candidate has 6+ years in SAP Security/GRC, hands-on SAP authorization knowledge, and familiarity with SOX, GxP, and PCI regulatory requirements.

Qualifications

• Bachelor’s degree in Computer Science, Engineering, or related field.
• 5+ years of SAP Security/GRC experience in large environments.
• Hands-on SAP authorization concepts and role design.
• Experience with SAP GRC Access Control components (ARA/ARM/BRM/EAM).
• Experience supporting SAP audits, remediations, and controls.

Responsibilities

• Design, implement, and operate SAP security and access-control for SAP landscapes.
• Configure and maintain SAP GRC modules and controls across S/4HANA, ECC, BW/4HANA, Fiori, BTP, SuccessFactors.
• Collaborate with audit, compliance, and business teams to ensure auditable SAP environments.
• Lead segregation-of-duties analysis and audit support activities.

Skills

SAP Security/GRC

Auditing & remediation

Regulatory knowledge (SOX/GxP/PCI)

Documentation & communication

Education

Bachelor's degree in CS/Engineering or related field

Tools

SAP GRC Access Control

SAP IAM/IDM tooling

Fiori, SAP BTP, SuccessFactors

SAP Process Control

Job description

Bright Vision Technologies is seeking an experienced SAP Security and GRC Engineer to design, implement, and operate security and access-control frameworks for SAP landscapes (S/4HANA, ECC, BW/4HANA, Fiori, BTP, SuccessFactors). You will manage role design, user provisioning, and audit support in a secure SAP environment.

The ideal candidate has 6+ years in SAP Security/GRC, hands-on SAP authorization knowledge, and familiarity with SOX, GxP, and PCI regulatory requirements.