SAP GRC & Security Specialist

Bart & Associates

About The Position

B&A is seeking an experienced SAP GRC & Security Specialist to design, implement, and manage governance, risk, and compliance (GRC) and security solutions across SAP environments. This role is responsible for ensuring regulatory compliance, enforcing security controls, and supporting audit readiness while aligning SAP security architecture with enterprise and federal security requirements. The ideal candidate will possess deep expertise in SAP security design, user access governance, and risk mitigation strategies, along with experience operating in highly secure, regulated environments.

Requirements

Bachelor’s degree from an accredited college or university in Computer Science, Information Technology, Finance, Supply Chain Management, or a related field
Minimum of 5–8 years of experience in SAP Security and/or SAP GRC
Hands-on experience with SAP GRC Access Control (ARA, ARM, BRM, EAM)
Strong understanding of Segregation of Duties (SoD) concepts and risk analysis
Experience with SAP environments such as SAP ECC, S/4HANA, BW, and Fiori
Knowledge of role-based access control (RBAC) and SAP authorization concepts
Experience supporting audits, compliance reviews, and remediation activities
SAP Security Administration (user roles, profiles, authorizations)
SAP GRC Access Control configuration and support
Segregation of Duties (SoD) analysis and mitigation
Risk and compliance management
Audit support and documentation
Identity and access management (IAM) principles
Strong understanding of SAP system landscapes and transport management
Ability to interpret and implement regulatory/security requirements
Familiarity with federal security frameworks (e.g., NIST, FISMA)
Strong analytical, problem-solving, and documentation skills

Nice To Haves

Experience with SAP S/4HANA migrations or implementations
Knowledge of SAP Fiori security and authorization concepts
Familiarity with Identity Governance tools (e.g., SailPoint, Okta, Azure AD)
Experience with automated controls and continuous monitoring tools
Background in DevSecOps or secure SDLC practices
Experience integrating SAP GRC with non-SAP systems
SAP certifications (e.g., SAP Security, SAP GRC)
Experience working in federal or highly regulated environments
Scripting or automation experience (e.g., Python, PowerShell)

Responsibilities

Design, implement, and maintain SAP security roles, profiles, and authorizations
Administer and support SAP GRC Access Control modules, including: Access Risk Analysis (ARA), Access Request Management (ARM), Business Role Management (BRM), Emergency Access Management (EAM)
Perform Segregation of Duties (SoD) analysis and risk remediation
Lead user provisioning, de-provisioning, and access reviews
Support internal and external audit activities, including evidence gathering and remediation tracking
Develop and maintain security policies, procedures, and control documentation
Monitor and respond to SAP security incidents and vulnerabilities
Collaborate with functional and technical teams to ensure secure SAP configurations
Ensure compliance with federal, regulatory, and organizational security standards
Provide recommendations for continuous improvement of SAP security posture

Benefits

Three robust individual and family medical plans
Health Savings Account (HSA) option
Two tiers of dental coverage
Vision insurance
Life & AD&D insurance
Disability insurance
Accident insurance
Hospital indemnity insurance
Critical illness insurance
Paid time off
B&A sponsored trainings and certifications
Pet insurance benefits
Commuter transit benefits
Free subscription to a virtual exercise platform (NEOU)
401(k) plan with company matching contribution
B&A Cares program (wellness check ins, personal development, financial management, stress management seminars)
Formal mentorship program
Job shadowing and cross training opportunities
Brand Ambassador program
Employee Assistance Program (EAP) (counseling, legal guidance, financial planning)
Monthly teambuilding events
Annual Wellness Challenges (#StepWithB&A, #WalkDuringLunchWithB&A, #VolunteeringWithB&A, #ExerciseDuringLunchWithB&A)