Senior SAP Security & GRC Lead — SOX & Access Control

UCRYA; Florida; On-site; USD 110,000 - 160,000; Full time

Job summary

UCRYA LLC seeks an experienced Information Security Analyst to lead SAP security design, governance, and access control for on-premises and cloud environments. You will configure roles and authorizations across S/4 HANA, Fiori, BW/HANA, HCM, SRM, and CRM, ensuring SOX compliance and robust governance.

Responsibilities include administering GRC modules, designing RBAC across SAP landscapes, managing elevated access, and supporting audits and go-lives.

Qualifications

• Proven experience in SAP Security and GRC administration.
• Solid understanding of SOX controls and SOD analysis for audit readiness.
• Familiarity with SAP platforms (S/4 HANA, Fiori, BW/HANA, HCM, SRM, CRM).
• Knowledge of cloud and on-prem SAP security frameworks.
• Strong problem-solving and communication skills.

Responsibilities

• Administer SAP GRC Access Control, Process Control, and Risk Management.
• Design and implement role-based access controls across SAP modules.
• Monitor and manage elevated privileges and Firefighter access.
• Conduct risk assessments and propose mitigation strategies.
• Ensure SOX compliance and assist audits.
• Review SOD conflicts and remediate violations.
• Configure SAP GRC workflows and Business Role Management.
• Collaborate with control owners to strengthen governance.
• Promote security awareness and best practices.
• Support UAT, SIT, and cutover activities during go-lives or upgrades.

Skills

SAP Security

GRC Administration

SOX Controls

SOD Analysis

RBAC Design

Cloud & On-Prem SAP Security

Security Governance

Communication Skills

Tools

SAP GRC Access Control

S/4 HANA Security

Fiori Security

Job description

UCRYA LLC seeks an experienced Information Security Analyst to lead SAP security design, governance, and access control for on-premises and cloud environments. You will configure roles and authorizations across S/4 HANA, Fiori, BW/HANA, HCM, SRM, and CRM, ensuring SOX compliance and robust governance.

Responsibilities include administering GRC modules, designing RBAC across SAP landscapes, managing elevated access, and supporting audits and go-lives.