Senior SAP Security & GRC Engineer - Remote

Bright Vision Technologies; Acton (MA); On-site; USD 100,000 - 150,000; Full time

Job summary

Bright Vision Technologies is seeking an experienced SAP Security & GRC Engineer to design, implement, and operate security and access-control frameworks across SAP landscapes (S/4HANA, ECC, BW/4HANA, Fiori, BTP, SuccessFactors). You will manage role design, user provisioning, and audit support while ensuring a secure, auditable SAP environment.

The role requires deep SAP authorization expertise and hands-on experience with SAP GRC suites, collaborating with audit, compliance, and business teams

Qualifications

• Bachelor’s degree or higher in CS, engineering, or related field.
• 5+ years of SAP Security/GRC experience in enterprise settings.
• Strong hands-on SAP authorization concepts and role design.
• Experience operating SAP GRC Access Control (ARA, ARM, BRM, EAM).
• Experience supporting SAP audits and remediation activities.
• Hands-on experience securing Fiori, BTP, and cloud SAP apps.

Responsibilities

• Design and maintain SAP authorization concepts and role structures aligned with business processes and least-privilege principles.
• Build and maintain master, derived, and composite roles for S/4HANA, ECC, and Fiori apps.
• Configure and operate SAP GRC Access Control (ARA, ARM, BRM, EAM).
• Perform segregation-of-duties analysis and remediation with audit teams.
• Configure user provisioning workflows in SAP GRC ARM and integrate with IDM/IAM platforms.

Skills

SAP authorization concepts

GRC Access Control

Audit support

Fiori security

Education

Bachelor’s degree in Computer Science or related field

Tools

SAP IDM

IGA tooling

Job description

Bright Vision Technologies is seeking an experienced SAP Security & GRC Engineer to design, implement, and operate security and access-control frameworks across SAP landscapes (S/4HANA, ECC, BW/4HANA, Fiori, BTP, SuccessFactors). You will manage role design, user provisioning, and audit support while ensuring a secure, auditable SAP environment.

The role requires deep SAP authorization expertise and hands-on experience with SAP GRC suites, collaborating with audit, compliance, and business teams