Remote SAP GRC Specialist: Security & Access Design

Bright Vision Technologies; Renton (WA); On-site; USD 100,000 - 150,000; Full time

Job summary

Bright Vision Technologies is actively seeking an experienced SAP GRC Specialist to design, implement, and operate security and access-control frameworks across SAP landscapes such as S/4HANA, ECC, BW/4HANA, Fiori, and BTP. You will own SAP role design, user provisioning, and SOX/GxP/PCI audit support in a complex environment.

The role collaborates with audit, compliance, and business teams to deliver a secure, auditable SAP environment.

Qualifications

• Bachelor’s degree in Computer Science, Engineering, or a related technical discipline.
• 5+ years of SAP Security / GRC experience in enterprise landscapes.
• Hands-on experience with SAP authorization concepts and role design.
• Experience operating SAP GRC Access Control (ARA, ARM, BRM, EAM).
• Experience supporting SAP audits and remediation activities.
• Hands-on experience securing Fiori, BTP, and cloud SAP applications.
• Familiarity with SAP IDM or third-party IGA tooling.
• Knowledge of SAP Process Control.
• Strong understanding of regulatory frameworks such as SOX, GxP, and PCI.
• Excellent communication and documentation skills.

Responsibilities

• Design and maintain SAP authorization concepts and role structures aligned with business processes and least-privilege principles.
• Build and maintain master, derived, composite, and business roles for S/4HANA, ECC, and Fiori applications.
• Configure and operate SAP GRC Access Control (ARA, ARM, BRM, EAM).
• Perform segregation-of-duties analysis and remediation with process owners and internal audit.
• Configure user provisioning workflows in SAP GRC ARM with IDM/IAM integration.
• Operate SAP GRC Process Control for continuous controls monitoring and policy management.
• Implement security for Fiori, including catalogs, groups, and front-end authorizations.
• Configure and operate security for SAP BTP and cloud apps using XSUAA, IAS, IPS.
• Support SAP audits (SOX, GxP, PCI) and remediation plans.
• Implement transport security, table logging, and audit logging.
• Monitor and remediate SAP Security Notes with Basis and DBA.
• Maintain comprehensive technical documentation and runbooks.
• Mentor junior team members.

Skills

SAP GRC

Access control design

Audits support

Documentation

Education

Bachelor’s degree in a technical field

Tools

GRC Access Control (ARA/ARM/BRM/EAM)

Fiori security

BTP security

IDM/IAM tooling

Job description

Bright Vision Technologies is actively seeking an experienced SAP GRC Specialist to design, implement, and operate security and access-control frameworks across SAP landscapes such as S/4HANA, ECC, BW/4HANA, Fiori, and BTP. You will own SAP role design, user provisioning, and SOX/GxP/PCI audit support in a complex environment.

The role collaborates with audit, compliance, and business teams to deliver a secure, auditable SAP environment.