Remote SAP GRC Engineer: Security & Risk

Bright Vision Technologies; Alpharetta (GA); Remote; USD 100,000 - 150,000; Full time

Job summary

Bright Vision Technologies is seeking an experienced SAP Governance & Risk Engineer to design, implement, and operate security and access-control frameworks across SAP landscapes, including S/4HANA, ECC, BW/4HANA, Fiori, BTP, and SuccessFactors.

You will own SAP role design, user provisioning, segregation-of-duties analysis, audit support, and the technical operation of SAP GRC suites, ensuring compliance with SOX, GxP, and PCI guidelines.

Qualifications

• 5+ years of SAP Security / GRC in enterprise landscapes.
• Strong hands-on SAP authorization concepts and role design.
• Deep experience operating SAP GRC Access Control (ARA, ARM, BRM, EAM).
• Experience supporting SAP audits and remediation activities.
• Hands-on experience securing Fiori, BTP, and cloud SAP applications.
• Familiarity with SAP IDM or third-party IGA tooling.
• Working knowledge of SAP Process Control.
• Strong understanding of regulatory frameworks such as SOX, GxP, and PCI.

Responsibilities

• Design, implement, and operate security and access-control frameworks for SAP landscapes.
• Own SAP role design, user provisioning, and segregation-of-duties analysis.
• Provide audit support and operational management of SAP GRC suites.

Skills

SAP Security & GRC

Authorization & role design

GRC Access Control (ARA/ARM/BRM/EAM)

Audits & remediation

Fiori/BTP/cloud SAP security

SAP IDM/IGA tooling

Regulatory knowledge (SOX/GxP/PCI)

Tools

SAP GRC

SCIM integrations

HANA security

Job description

Bright Vision Technologies is seeking an experienced SAP Governance & Risk Engineer to design, implement, and operate security and access-control frameworks across SAP landscapes, including S/4HANA, ECC, BW/4HANA, Fiori, BTP, and SuccessFactors.

You will own SAP role design, user provisioning, segregation-of-duties analysis, audit support, and the technical operation of SAP GRC suites, ensuring compliance with SOX, GxP, and PCI guidelines.