SAP GRC- Application Business Architect

Capgemini • Chicago, IL

3d • $101,140 - $182,624

About The Position

Capgemini is seeking an experienced SAP Governance, Risk and Compliance (GRC) Consultant to design, implement, support, and optimize SAP security and compliance solutions. The role partners with business, security, audit, risk, and technology teams to strengthen access governance, manage risk, and support compliance across SAP environments. It requires hands-on SAP GRC Access Control and SAP security expertise, together with the ability to translate business and compliance requirements into practical, scalable solutions.

Application Business Architects lead business transformation and the development and implementation of deliverables such as business capability models, business capabilities, and value streams. They advise clients on meeting business requirements through package or SaaS software, develop solutions using vendors and partners, lead process improvements and as-is/to-be analyses, and advise on implementing package modules. The role may include facilitating workshops and supporting integration testing and user acceptance testing. Relevant package/SaaS solution and methodology certifications are to be maintained.

This position also supports SAP implementations, upgrades, transformations, and remediation initiatives from a GRC and security perspective. It develops solution and security documentation, participates in testing and defect resolution, and provides recommendations on SAP security, access governance, controls, and GRC practices. The posted base compensation range is $101,140–$182,624. The role may also be eligible for variable incentives, bonuses, or commissions. Capgemini describes a benefits package for regular, full-time employees that may include paid time off, holidays, personal days, sick leave, health coverage, retirement savings plans, life and disability insurance, and employee assistance programs, subject to local policy and eligibility.

Requirements

• Strong experience with SAP GRC Access Control, including ARA, ARM, BRM, and EAM.
• Strong understanding of SAP Security, roles, profiles, authorization concepts, and user administration.
• Experience performing Segregation of Duties (SoD) analysis, access risk assessment, remediation, and mitigation.
• Experience configuring GRC workflows, rulesets, risk libraries, mitigating controls, and access request processes.
• Knowledge of SAP role design concepts, including single, composite, and derived roles.
• Experience supporting security and access governance across SAP applications and enterprise environments.
• Strong understanding of identity and access management principles, internal controls, audit requirements, and compliance processes.
• Experience supporting SAP implementations, upgrades, migrations, or transformation programs.
• Strong analytical and problem-solving skills, including the ability to assess complex security and access issues.
• Strong communication and stakeholder-management skills across business, technology, security, risk, and audit organizations.
• Ability to work independently and contribute effectively within global and cross-functional teams.
• Bachelor’s degree in Computer Science, Information Technology, Information Systems, Business, or a related field required.

Nice To Haves

• Familiarity with SAP S/4HANA security and authorization concepts is highly preferred.
• Exposure to SAP Fiori security, catalogs, groups/spaces/pages, and related authorization concepts is preferred.
• Experience integrating SAP GRC with SAP and non-SAP systems is a plus.

Responsibilities

• Design, configure, implement, and support SAP GRC Access Control solutions, including ARA, ARM, BRM, and EAM.
• Support SAP security and role design across SAP environments, including role creation, modification, testing, and deployment.
• Configure and maintain GRC rulesets, workflows, approval processes, risk definitions, and mitigating controls.
• Support user access provisioning, role assignments, access reviews, and periodic certification activities.
• Partner with business process owners, Internal Audit, IT Security, Risk, and Compliance teams on access governance requirements.
• Analyze complex security and authorization issues and recommend sustainable solutions aligned with business requirements.
• Support SAP implementations, upgrades, transformations, and remediation initiatives from a GRC and security perspective.
• Assist with audit requests, controls testing, evidence gathering, and remediation of access or compliance issues.
• Develop functional and technical documentation, security standards, operating procedures, and solution designs.
• Participate in unit testing, integration testing, UAT support, and defect resolution.
• Provide guidance and recommendations on SAP security, access governance, controls, and GRC leading practices.
• Collaborate with global and cross-functional teams to deliver solutions aligned with business objectives and compliance requirements.
• Lead business transformation and the development and implementation of business capability models, business capabilities, and value streams.
• Advise clients on business requirements using package/SaaS solutions and lead process improvements and as-is/to-be analyses.
• Facilitate workshops and support integration testing and user acceptance testing as needed.
• Maintain certifications on SaaS or package-based solutions and relevant methodology.

Benefits

• Paid time off, with vacation of 12–25 days depending on employee grade, plus company-paid holidays, personal days, and sick leave, subject to policy.
• Medical, dental, and vision coverage, or provincial healthcare coordination in Canada, subject to local policy and eligibility.
• Retirement savings plans, such as 401(k) in the U.S. or RRSP in Canada, subject to local policy and eligibility.
• Life and disability insurance, subject to local policy and eligibility.
• Employee assistance programs, subject to local policy and eligibility.
• May be eligible for variable incentives, bonuses, or commissions, depending on the position and applicable laws.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level