SAP Security Consultant - Hybrid Role

Global Business Ser. 4u; Connecticut; Remote; USD 120,000 - 160,000; Full time

Job summary

Global Business Ser. 4u is seeking an SAP Security/GRC Lead to design, implement, and maintain secure access across the SAP S/4HANA landscape, ensuring SOX and ITAR compliance.

The role partners with audit, functional, and technical teams to manage risk, support transformations, and oversee SoD, EAM, ARA/ARM/BRM. Remote work with rare travel to CT office.

Qualifications

• 3–7+ years of experience in SAP Security and/or SAP GRC Access Control.
• Strong understanding of SAP authorization concepts, role design, and security architecture.
• Hands-on experience with GRC modules (ARA, ARM, BRM, EAM).
• Familiarity with audit frameworks (SOX, NIST 800 171, CMMC).
• Experience supporting SAP S/4HANA environments (on-premise).
• Ability to analyze complex authorization issues and propose effective solutions.
• Excellent communication skills and ability to work with cross-functional teams.

Responsibilities

• Design, build, and maintain SAP roles and authorizations across S/4HANA on Premise.
• Manage user provisioning, role assignments, and access remediation.
• Perform security impact analysis for new projects, transports, and functional changes.
• Support security patching, vulnerability remediation, and audit readiness.
• Monitor and troubleshoot authorization failures, SU53/SUIM analysis, and STAUTHTRACE.
• Ensure compliance with ITAR, DFARS 252.204 7012, CMMC, and organizational security policies.

Skills

SAP Security

GRC Access Control

SOX Compliance

NIST 800-171

S/4HANA Security

Audit Liaison

Identity Governance

Tools

GRC ARA

GRC ARM

GRC BRM

GRC EAM

Job description

Title: SAP GRC Consultant

Location: Remote, if there is travel, will know way advance, only 1 time possible to CT office.

Start: July 27th (depends on the MSA process, could be sooner or week later)

Duration – 12+ months

Role Overview

The SAP Security/GRC Lead Consultant is responsible for designing, implementing, and maintaining secure access across the SAP S/4HANA landscape. This role ensures compliance with internal controls, regulatory requirements (SOX, ITAR, DFARS, CMMC), and industry best practices. The consultant partners with functional, technical, and audit teams to safeguard SAP systems, manage risk, and support ongoing transformation initiatives.

Key Responsibilities

• Design, build, and maintain SAP roles and authorizations across S/4HANA on Premise.
• Manage user provisioning, role assignments, and access remediation.
• Perform security impact analysis for new projects, transports, and functional changes.
• Support security patching, vulnerability remediation, and audit readiness.
• Monitor and troubleshoot authorization failures, SU53/SUIM analysis, and STAUTHTRACE.
• Ensure compliance with ITAR, DFARS 252.204 7012, CMMC, and organizational security policies.

SAP Security

• Design, build, and maintain SAP roles and authorizations across S/4HANA on Premise.
• Manage user provisioning, role assignments, and access remediation.
• Perform security impact analysis for new projects, transports, and functional changes.
• Support security patching, vulnerability remediation, and audit readiness.
• Monitor and troubleshoot authorization failures, SU53/SUIM analysis, and STAUTHTRACE.
• Ensure compliance with ITAR, DFARS 252.204 7012, CMMC, and organizational security policies.

SAP GRC

• Administer and enhance SAP GRC Access Control (ARA, ARM, BRM, EAM).
• Maintain Segregation of Duties (SoD) rulesets and risk matrices.
• Manage Emergency Access Management (Firefighter) setup, logs, and reviews.
• Support Access Request workflows, role approval processes, and automated provisioning.
• Conduct periodic access reviews, SoD remediation, and compliance reporting.
• Partner with Internal Audit to support SOX controls, evidence collection, and audit walkthroughs.

Governance, Risk & Compliance

• Develop and maintain security standards, procedures, and documentation.
• Participate in risk assessments, control testing, and remediation planning.
• Support change management processes to ensure secure transport and deployment practices.
• Collaborate with cybersecurity teams on Zero Trust, MFA, VPN, and identity governance initiatives.

Required Qualifications

• 3–7+ years of experience in SAP Security and/or SAP GRC Access Control.
• Strong understanding of SAP authorization concepts, role design, and security architecture.
• Hands-on experience with GRC modules (ARA, ARM, BRM, EAM).
• Familiarity with audit frameworks (SOX, NIST 800 171, CMMC).
• Experience supporting SAP S/4HANA environments (on-premise).
• Ability to analyze complex authorization issues and propose effective solutions.
• Excellent communication skills and ability to work with cross-functional teams.

Preferred Qualifications

• Experience in Aerospace & Defense or other regulated industries.
• Knowledge of ITAR U.S. Person requirements and controlled data handling.
• Understanding of Basis, ABAP, or Identity Governance concepts.
• SAP certifications in Security, GRC, or related areas.