SAP GRC Security - Application Business Architect

Capgemini•Houston, TX
•$101,140 - $182,624

About The Position

Capgemini is seeking an SAP GRC Security – Application Business Architect to support SAP Governance, Risk, and Compliance (GRC) and security activities across SAP environments. The role supports risk identification, controls, security administration, audit readiness, and compliance, partnering with SAP technical, functional, and business teams. The position designs, configures, implements, and supports secure and compliant SAP environments across cloud and on-premise landscapes. Its scope includes SAP GRC Access Control and Process Control, S/4HANA Security, SAP Fiori Security, SAP BTP Security, SAP Cloud Identity Services, IAM/IGA, access governance, risk management, and compliance. The role participates throughout the implementation lifecycle, from requirements and design through testing, cutover, go-live, and hypercare.

Requirements

  • Strong hands-on experience with SAP GRC 12.0 Access Control and SAP GRC for HANA 2026.
  • Strong experience with SAP GRC Process Control.
  • Expertise in ARA, ARM, EAM, BRM, SoD, access risk management, and remediation or mitigation.
  • Hands-on experience with MSMP workflow and BRF+ configuration.
  • Strong knowledge of SAP S/4HANA Security, SAP Security, authorizations, and role design.
  • Experience with SAP Fiori Security and front-end/back-end authorization concepts.
  • Hands-on knowledge of SAP BTP Security, role collections, application roles, and authorization management.
  • Experience with SAP Cloud Identity Services, Identity Authentication, and Identity Provisioning.
  • Understanding of IAM, IGA, identity lifecycle management, SSO, federation, and access governance.
  • Experience integrating SAP cloud and on-premise environments and establishing secure connectivity.
  • Experience with GRC master data, organizational structures, reporting, compliance monitoring, and GRC integration.
  • Strong understanding of SAP business processes, security controls, audit, risk, and compliance requirements.
  • Strong troubleshooting, analytical, communication, and stakeholder-management skills.

Responsibilities

  • Design, configure, implement, and support SAP GRC Access Control and Process Control solutions.
  • Manage ARA, ARM, EAM, BRM, segregation of duties (SoD), risk analysis, mitigation, and access governance.
  • Configure and support MSMP workflows, BRF+, approval processes, connectors, synchronization, and user provisioning.
  • Support Process Control capabilities, including internal controls, risk and control management, control assessments and testing, issue management, remediation, continuous control monitoring, compliance, and certification.
  • Design and support SAP S/4HANA security, including roles, authorization objects, organizational values, user administration, and troubleshooting.
  • Support SAP Fiori Security, including front-end and back-end authorization.
  • Design and implement SAP BTP Security, including Global Accounts, Directories, Subaccounts, users, role collections, application roles, and authorizations.
  • Configure and support SAP Cloud Identity Services, including Identity Authentication and Identity Provisioning.
  • Support authentication, authorization, identity federation, single sign-on, IAM/IGA, and cloud/on-premise security integration.
  • Partner with Role Owners, Business Process Owners, Internal Audit, Compliance, Security, application, and technical teams to address security and access risks.
  • Participate in the implementation lifecycle, including requirements gathering, design, configuration, SIT, UAT, cutover, go-live, and hypercare.

Benefits

  • Paid time off: 12–25 vacation days depending on employee grade, company-paid holidays, personal days, and sick leave, based on policy.
  • Medical, dental, and vision coverage, or provincial healthcare coordination in Canada.
  • Retirement savings plans, such as 401(k) in the U.S. or RRSP in Canada.
  • Life and disability insurance.
  • Employee assistance programs.
  • Other benefits as provided by local policy and eligibility.
  • The role may be eligible for variable incentives, bonuses, or commissions, depending on the position and applicable laws.
© 2026 Teal Labs, Inc
Privacy PolicyTerms of Service