SAP Security & GRC Expert — SOX, SoD, S/4HANA

The Doyle Group; Denver (CO); Hybrid; USD 120,000 - 150,000; Full time

Job summary

The Doyle Group in Denver, CO is seeking a SAP Security Specialist to own SAP security, GRC controls, and SOX compliance across the SAP landscape. You will collaborate with Finance, Internal Audit, and Information Security to build a mature security program as the company scales globally.

You will design roles, manage SoD, and support audits while partnering with the SOX lead and external advisors. This is a key IC role with broad visibility in a growing quantum-ready organization.

Qualifications

• 5+ years of SAP security administration experience.
• 2+ years administering SAP GRC Access Control with SoD monitoring.
• Experience supporting SOX compliance and audit evidence collection.
• Familiarity with SAP S/4HANA security and SAP Fiori security.

Responsibilities

• Own design, build-out, and optimization of SAP security roles and authorization models across SAP apps.
• Lead redesign of legacy security structure into scalable, well-governed model as company grows.
• Administer and support SAP GRC solution, including Access Control workflows and SoD monitoring.
• Analyze access risk and propose mitigation aligned with security and compliance standards.
• Serve as primary contact for SOX compliance across Finance, Internal Audit, and stakeholders.
• Generate audit evidence and documentation for SOX reviews and audits.

Skills

SAP security administration

GRC Access Control

SoD concepts & remediation

SOX compliance

SAP S/4HANA security

SAP Fiori security

Security testing

Access risk analysis

SAP incidents troubleshooting

Education

Bachelor's degree or equivalent

Tools

SAP GRC Access Control

CPGRC (ControlPanelGRC)

Job description

The Doyle Group in Denver, CO is seeking a SAP Security Specialist to own SAP security, GRC controls, and SOX compliance across the SAP landscape. You will collaborate with Finance, Internal Audit, and Information Security to build a mature security program as the company scales globally.

You will design roles, manage SoD, and support audits while partnering with the SOX lead and external advisors. This is a key IC role with broad visibility in a growing quantum-ready organization.