SAP GRC Security - Application Business Architect

Capgemini • Houston, TX

2d

About The Position

Capgemini is seeking an SAP GRC and Security professional to design, configure, implement, and support secure and compliant SAP environments across cloud and on-premise landscapes. The role covers SAP GRC Access Control and Process Control, SAP S/4HANA and Fiori security, SAP BTP security, SAP Cloud Identity Services, IAM/IGA, access governance, risk management, and compliance.

The position partners with role owners, business process owners, internal audit, compliance, security, application, and technical teams to address security and access risks. It participates throughout the implementation lifecycle, including requirements gathering, design, configuration, system and user acceptance testing, cutover, go-live, and hypercare.

Requirements

• Strong hands-on experience with SAP GRC 12.0 Access Control and SAP GRC for HANA 2026.
• Strong experience with SAP GRC Process Control.
• Expertise in ARA, ARM, EAM, BRM, SoD, access risk management, and remediation or mitigation.
• Hands-on experience with MSMP workflow and BRF+ configuration.
• Strong knowledge of SAP S/4HANA security, SAP security, authorizations, and role design.
• Experience with SAP Fiori security and front-end/back-end authorization concepts.
• Hands-on knowledge of SAP BTP security, role collections, application roles, and authorization management.
• Experience with SAP Cloud Identity Services, Identity Authentication, and Identity Provisioning.
• Understanding of IAM, IGA, identity lifecycle management, SSO, federation, and access governance.
• Experience integrating SAP cloud and on-premise environments and establishing secure connectivity.
• Experience with GRC master data, organizational structures, reporting, compliance monitoring, and GRC integration.
• Strong understanding of SAP business processes, security controls, audit, risk, and compliance requirements.
• Strong troubleshooting, analytical, communication, and stakeholder-management skills.

Responsibilities

• Design, configure, implement, and support SAP GRC Access Control and Process Control solutions.
• Manage ARA, ARM, EAM, BRM, segregation of duties, risk analysis, mitigation, and access governance.
• Configure and support MSMP workflows, BRF+, approval processes, connectors, synchronization, and user provisioning.
• Support Process Control, including internal controls, risk and control management, control assessments and testing, issue management, remediation, continuous control monitoring, compliance, and certification.
• Design and support SAP S/4HANA security, including roles, authorization objects, organizational values, user administration, and troubleshooting.
• Support SAP Fiori security, including front-end and back-end authorization.
• Design and implement SAP BTP security, including global accounts, directories, subaccounts, users, role collections, application roles, and authorizations.
• Configure and support SAP Cloud Identity Services, including Identity Authentication and Identity Provisioning.
• Support authentication, authorization, identity federation, single sign-on, IAM/IGA, and cloud/on-premise security integration.
• Partner with role owners, business process owners, internal audit, compliance, security, application, and technical teams to address security and access risks.
• Participate in implementation activities including requirements gathering, design, configuration, SIT, UAT, cutover, go-live, and hypercare.

Benefits

• Paid time off, including vacation (12–25 days depending on employee grade), company-paid holidays, personal days, and sick leave.
• Medical, dental, and vision coverage, or provincial healthcare coordination in Canada.
• Retirement savings plans, such as 401(k) in the U.S. or RRSP in Canada.
• Life and disability insurance.
• Employee assistance programs.
• Other benefits as provided by local policy and eligibility.

What This Job Offers

• Job Type: Full-time
• Education Level: No Education Listed