Remote SAP GRC Specialist: Security & Access Architect

Bright Vision Technologies; Sammamish (WA); On-site; USD 100,000 - 150,000; Full time

Job summary

Bright Vision Technologies is seeking an experienced SAP GRC Specialist for a 100% remote role in the United States. The candidate will design, implement, and operate security and access-control frameworks across SAP landscapes including S/4HANA, ECC, and Fiori.

The role requires 6+ years of SAP Security/GRC experience, strong authorization design skills, and familiarity with audits (SOX, GxP, PCI). Collaboration with audit, compliance, and business teams is essential.

Qualifications

• Bachelor’s degree in Computer Science, Engineering, or related technical discipline.
• Five or more years of SAP Security / GRC experience in enterprise landscapes.
• Strong hands‑on experience with SAP authorization concepts and role design.
• Deep experience operating SAP GRC Access Control (ARA, ARM, BRM, EAM).
• Experience supporting SAP audits and remediation activities.
• Hands‑on experience securing Fiori, BTP, and cloud SAP applications.
• Familiarity with SAP IDM or third‑party IGA tooling.
• Working knowledge of SAP Process Control.
• Strong understanding of regulatory frameworks such as SOX, GxP, and PCI.
• Excellent communication and documentation skills.

Responsibilities

• Design and maintain SAP authorization concepts and role structures aligned with business processes and least‑privilege principles.
• Build and maintain master, derived, composite, and business roles for S/4HANA, ECC, and Fiori applications.
• Configure and operate SAP GRC Access Control (ARA, ARM, BRM, EAM), including ruleset management, mitigating controls, and emergency access management.
• Perform segregation-of-duties analysis and remediation in collaboration with business process owners and internal audit.
• Configure user provisioning workflows in SAP GRC ARM, including request types, approval paths, and integration with IDM/IAM platforms.
• Operate SAP GRC Process Control for continuous controls monitoring and policy management.
• Implement security for Fiori applications, including catalogs, groups, and front‑end authorizations.
• Configure and operate security for SAP BTP and cloud applications using XSUAA, IAS, and IPS.
• Support SAP audits (SOX, GxP, PCI) and respond to audit findings with documented remediation plans.
• Implement transport security, table logging, and audit logging in line with internal security policies.
• Monitor and remediate SAP Security Notes in coordination with Basis and DBA teams.
• Maintain comprehensive, current technical documentation—architecture diagrams, design decisions, configuration references, runbooks.

Skills

SAP GRC Security

SAP Authorization design

Audit remediation

GRC architecture

Fiori/BTP security

SOX/GxP/PCI compliance

Documentation/communication

IDM/IGA tooling familiarity

Education

Bachelor’s degree in CS/Engineering

Tools

GRC Access Control

GRC Process Control

Fiori Security

SAP BTP security

IAS/IPS

IDM/IGA tooling

SCIM

Job description

Bright Vision Technologies is seeking an experienced SAP GRC Specialist for a 100% remote role in the United States. The candidate will design, implement, and operate security and access-control frameworks across SAP landscapes including S/4HANA, ECC, and Fiori.

The role requires 6+ years of SAP Security/GRC experience, strong authorization design skills, and familiarity with audits (SOX, GxP, PCI). Collaboration with audit, compliance, and business teams is essential.