SAP GRC Security - Application Business Architect

Capgemini•Chicago, IL

About The Position

Capgemini is seeking an SAP GRC Security – Application Business Architect to design, configure, implement, and support secure and compliant SAP environments across cloud and on-premise landscapes. The role supports SAP Governance, Risk, and Compliance (GRC) and security activities, including risk identification, controls, security administration, audit readiness, and compliance. The position partners with SAP technical, functional, and business teams and works with role owners, business process owners, Internal Audit, Compliance, Security, application, and technical teams to address security and access risks. The role covers SAP GRC Access Control and Process Control, SAP S/4HANA and Fiori security, SAP BTP security, and SAP Cloud Identity Services. It also participates across the implementation lifecycle, from requirements gathering and design through configuration, SIT, UAT, cutover, go-live, and hypercare.

Requirements

Strong hands-on experience with SAP GRC 12.0 Access Control and SAP GRC for HANA 2026.
Strong experience with SAP GRC Process Control.
Expertise in ARA, ARM, EAM, BRM, SoD, access risk management, and remediation or mitigation.
Hands-on experience with MSMP workflow and BRF+ configuration.
Strong knowledge of SAP S/4HANA security, SAP security, authorizations, and role design.
Experience with SAP Fiori security and front-end/back-end authorization concepts.
Hands-on knowledge of SAP BTP security, role collections, application roles, and authorization management.
Experience with SAP Cloud Identity Services, Identity Authentication, and Identity Provisioning.
Understanding of IAM, IGA, identity lifecycle management, SSO, federation, and access governance.
Experience integrating SAP cloud and on-premise environments and establishing secure connectivity.
Experience with GRC master data, organizational structures, reporting, compliance monitoring, and GRC integration.
Strong understanding of SAP business processes, security controls, audit, risk, and compliance requirements.
Strong troubleshooting, analytical, communication, and stakeholder-management skills.

Responsibilities

Design, configure, implement, and support SAP GRC Access Control and Process Control solutions.
Manage ARA, ARM, EAM, BRM, segregation of duties (SoD), risk analysis, mitigation, and access governance.
Configure and support MSMP workflows, BRF+, approval processes, connectors, synchronization, and user provisioning.
Support Process Control capabilities, including internal controls, risk and control management, control assessments and testing, issue management, remediation, continuous control monitoring, compliance, and certification.
Design and support SAP S/4HANA security, including roles, authorization objects, organizational values, user administration, and troubleshooting.
Support SAP Fiori security, including front-end and back-end authorization.
Design and implement SAP BTP security, including global accounts, directories, subaccounts, users, role collections, application roles, and authorizations.
Configure and support SAP Cloud Identity Services, including Identity Authentication and Identity Provisioning.
Support authentication, authorization, identity federation, single sign-on (SSO), IAM/IGA, and cloud/on-premise security integration.
Partner with role owners, business process owners, Internal Audit, Compliance, Security, application, and technical teams to address security and access risks.
Participate in the implementation lifecycle, including requirements gathering, design, configuration, SIT, UAT, cutover, go-live, and hypercare.

Benefits

Paid time off, including vacation (12–25 days depending on employee grade), company-paid holidays, personal days, and sick leave, subject to policy.
Medical, dental, and vision coverage, or provincial healthcare coordination in Canada, subject to local policy and eligibility.
Retirement savings plans, such as 401(k) in the U.S. or RRSP in Canada, subject to local policy and eligibility.
Life and disability insurance, subject to local policy and eligibility.
Employee assistance programs, subject to local policy and eligibility.
Other benefits as provided by local policy and eligibility.
The role may be eligible for variable incentives, bonuses, or commissions, depending on the position and applicable laws.

Stand Out From the Crowd

Upload your resume and get instant feedback on how well it matches this job.

Upload and Match Resume