SAP Security/GRC Expert - Access Control (Contract SME)

M&S Consulting • , (Multiple States)

30d • Remote

About The Position

M&S Consulting is seeking a senior SAP Security and GRC Subject Matter Expert to support a post go-live stabilization effort. The engagement focuses on cleaning up the Access Control landscape, remediating broken or misconfigured workflows and validating Segregation of Duties (SoD) controls against issues already identified by the internal team. The SME will work shoulder to shoulder with an internal resource and transfer knowledge throughout the engagement so the organization can own ongoing maintenance.

Requirements

• US Citizenship required
• Ability to work core hours in US Eastern Time
• Senior-level practitioner: 10+ years of SAP Security experience with deep focus on GRC Access Control (10.x or 12.x)
• Hands-on expertise across the GRC AC modules: Access Request Management (ARM), Business Role Management (BRM), Emergency Access Management (EAM/Firefighter) and Access Risk Analysis (ARA)
• Demonstrated experience remediating SoD conflicts and defining mitigating controls
• Strong SAP role design background (single, composite, derived) and user provisioning
• Experience troubleshooting MSMP workflows and BRF+ rules
• Comfort operating in a post go-live stabilization context where scope surfaces iteratively
• Strong written documentation and knowledge-transfer skills; able to teach as much as they deliver
• Track record operating effectively in a fully remote engagement model
• Eastern time working hours strongly preferred

Nice To Haves

• Experience with SAP S/4HANA environments
• Experience as an embedded SME rather than a large-program contributor
• Familiarity with cross-entity or shared-services access scenarios

Responsibilities

• Perform post go-live cleanup of the SAP GRC Access Control environment
• Diagnose and remediate broken or misconfigured workflows, including cross-organizational approval flows
• Validate and remediate SoD issues surfaced during internal review; document mitigating controls where remediation is not feasible
• Review and refine role design, user provisioning and access request workflows
• Provide direct, hands-on knowledge transfer to the assigned internal resource across every workstream
• Document remediation activities, design decisions and residual risks for clean handoff
• Surface additional scope discovered during remediation for joint decisioning at the mid-engagement checkpoint

Benefits

• M&S Consulting proactively fulfills its role as an equal opportunity employer. We do not discriminate against any employee or applicant for employment because of race, color, sex, religion, age, sexual orientation, gender identity and expression, national origin, marital status, physical or mental disability, status as a protected veteran, or any other characteristic protected by law.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed