SAP Security & GRC Lead

247Hire; Chicago (IL); On-site; USD 120,000 - 180,000; Full time

Job summary

247Hire seeks an experienced SAP Security & GRC Lead to oversee design, implementation, governance, and ongoing support of SAP Security and SAP GRC across the enterprise.

You will provide leadership in authorization design, SoD compliance, role management, and audit readiness, aligning with risk management objectives and organizational policies. This role demands strong leadership and collaboration with audit and cybersecurity teams.

Qualifications

• Bachelor's degree in IT, CS, cybersecurity or related field.
• 8+ years SAP Security experience with at least 3 years in a lead role.
• Strong experience with SAP Security and Authorization concepts.
• Hands-on experience implementing SAP GRC Access Control.
• Deep understanding of SoD compliance and risk management.
• Experience supporting SAP ECC, SAP S/4HANA, and SAP SuccessFactors security.
• Strong knowledge of audit, compliance and security governance frameworks.

Responsibilities

• Lead design, implementation and maintenance of SAP security architecture across SAP landscapes.
• Define and enforce security standards, policies, and procedures.
• Oversee secure access management for SAP business applications and platforms.
• Review and approve security design, role concepts, and authorization strategies.
• Design and maintain SAP roles, profiles, and authorization objects.
• Mentor and supervise SAP Security and GRC consultants.
• Collaborate with Internal Audit, Compliance, Cybersecurity and Risk teams.
• Drive continuous improvement in security governance and SoD controls.

Skills

SAP Security

SoD

GRC Access Control

Role Management

Audit Readiness

Security Governance

Leadership

Education

Bachelor's degree in IT/CS/Cybersecurity

Tools

SAP GRC Access Control

SAP ECC

SAP S/4HANA

SAP SuccessFactors

Job description

Position Summary

We are seeking an experienced SAP Security & GRC Lead to oversee the design, implementation, governance, and support of SAP Security and SAP Governance, Risk, and Compliance (GRC) solutions across the enterprise. The ideal candidate will provide leadership in SAP authorization design, Segregation of Duties (SoD) compliance, role management, audit readiness, and security governance while ensuring alignment with organizational compliance and risk management objectives.

Key Responsibilities

• Lead the design, implementation, and maintenance of SAP security architecture across SAP landscapes.
• Define and enforce security standards, policies, and procedures.
• Ensure secure access management for SAP business applications and platforms.
• Review and approve security design, role concepts, and authorization strategies.
• Design and maintain SAP roles, profiles, and authorization objects.
• Lead role redesign and optimization initiatives.
• Establish role governance and access control processes.
• Conduct periodic user access reviews and remediation activities.
• Lead implementation and support of SAP GRC Access Control solutions.
• Manage Segregation of Duties (SoD) risk analysis and mitigation.
• Oversee Access Risk Analysis (ARA), Emergency Access Management (EAM), Access Request Management (ARM), and Business Role Management (BRM).
• Develop and maintain SAP security governance frameworks.
• Collaborate with Internal Audit, Compliance, Cybersecurity, and Risk teams.
• Mentor and supervise SAP Security and GRC consultants.
• Review deliverables and ensure adherence to quality standards.
• Drive continuous improvement initiatives and best practices.

Required Qualifications

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Business, or related discipline.
• 8+ years of SAP Security experience with at least 3 years in a lead role.
• Strong experience with SAP Security and Authorization concepts.
• Hands-on experience implementing and supporting SAP GRC Access Control.
• Deep understanding of Segregation of Duties (SoD) compliance and risk management.
• Experience supporting SAP ECC, SAP S/4HANA, and SAP SuccessFactors security.
• Strong knowledge of audit, compliance, and security governance frameworks.
• Excellent leadership, communication, and stakeholder management skills.