SAP GRC Access Control and SAP S/4HANA Security Specialist

Kastech Software Solutions Group; Washington (District of Columbia); Remote; USD 120,000 - 150,000; Full time

Job summary

Kastech Software Solutions Group is seeking an experienced SAP GRC Process Control Specialist to design, implement, and maintain our internal control and compliance framework. You will automate control testing, manage CCM, and align internal controls with risk and compliance goals, with strong preference for SAP S/4HANA experience.

Remote role with 50% travel to Washington, D.C. You will collaborate with IT, Risk & Compliance, Internal Audit, and external auditors to demonstrate automated

Qualifications

• Deep functional and technical hands-on experience configuring and supporting SAP GRC Process Control (v10.1, 12.0, or higher).
• Proven ability to configure automated controls, data source connectors, business rules, and script execution in GRC PC for CCM.

Responsibilities

• Design & Configuration: Configure and maintain SAP GRC Process Control (PC) modules including Master Data (Organizations, Process Maps, Sub-processes, Control Objectives, and Controls).
• Control Automation: Set up automated and semi-automated control testing, CCM, and continuous audits within SAP GRC PC.
• Assessments & Workflow: Design and execute control assessments (Design Effectiveness, Operating Effectiveness, Sub-process Design, and Self-Assessments) and configure GRC PC workflows/notifications.
• Issue & Remediation Management: Track control deficiencies, facilitate remediation plans, and generate compliance reporting for executives and auditors.

Skills

SAP GRC Expertise

CCM Configuration

SOX/COSO/NIST knowledge

GRC Integration with SAP AC

Job description

Role: SAP GRC Process Control Consultant

Location: Remote , 50% Travel to Washington D.C

Role Overview

We are seeking an experienced SAP GRC Process Control Specialist to design, implement, and maintain the internal control and compliance framework. In this role, you will be responsible for automating control testing, managing continuous control monitoring (CCM), and aligning internal controls with organizational risk and compliance goals. Experience with SAP S/4HANA is strongly preferred to support our ongoing digital transformations and modernized control environments.

Key Responsibilities

SAP GRC Process Control Implementation & Operations

• Design & Configuration: Configure and maintain SAP GRC Process Control (PC) modules, including Master Data (Organizations, Process Maps, Sub-processes, Control Objectives, and Controls).
• Control Automation: Set up automated and semi-automated control testing, Continuous Control Monitoring (CCM), and continuous audits within SAP GRC PC.
• Assessments & Workflow: Design and execute control assessments (Design Effectiveness, Operating Effectiveness, Sub-process Design, and Self-Assessments) and configure GRC PC workflows/notifications.
• Issue & Remediation Management: Track control deficiencies, facilitate remediation plans, and generate compliance reporting for executive stakeholders and internal/external auditors.

S/4HANA & Security Integration

• S/4HANA Alignment: Translate traditional ECC controls and business processes into SAP S/4HANA environments, leveraging new S/4HANA business process flows, tables, and authorization models.
• GRC Architecture Integration: Integrate GRC PC with Access Control (AC) and underlying SAP S4 systems for seamless continuous monitoring.
• Audit & Compliance Support: Act as the technical liaison between IT, Risk & Compliance, Internal Audit, and external audit teams to demonstrate automated control effectiveness.

Required Skills & Qualifications

Technical Skills

• SAP GRC Process Control Expertise: Deep functional and technical hands-on experience configuring and supporting SAP GRC Process Control (v10.1, 12.0, or higher).
• Continuous Control Monitoring (CCM): Proven track record of configuring automated controls, data source connectors, business rules, and script execution in GRC PC.
• Risk & Controls Frameworks: Solid understanding of SOX 404, COSO, NIST, or similar internal control frameworks and compliance requirement mapping.
• Integration Knowledge: Experience linking GRC PC with SAP Access Control (AC) for unified governance and segregation of duties (SoD) management.

Preferred / Nice-to-Have Skills

• SAP S/4HANA Experience: Hands-on experience with control frameworks and security paradigms in SAP S/4HANA (including Fiori applications and modern S/4 financial/operational processes).
• ABAP / SQL Basics: Basic understanding of SAP data structures, table schemas, and custom script logic for automated rules is a plus.
• Certification: SAP Certified Application Associate – SAP Access Control / Process Control is preferred.