SAP GRC Specialist

Bright Vision Technologies

. Design and maintain SAP authorization concepts and role structures aligned with business processes and least-privilege principles .

Posted 11/4/2026full-timeRemote • United StatesMid-LevelSenior💰 $150,000 - $185,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in SAP Security and GRC, with a strong focus on authorization concepts, role design, and compliance with regulatory frameworks such as SOX, GxP, and PCI. Proficient in configuring and operating SAP GRC Access Control and securing cloud applications, while effectively mentoring team members and maintaining comprehensive documentation.

Highest-signal resume keywords

SAP Security / GRC ExperienceSAP GRC Access Control (ARA, ARM, BRM, EAM)Fiori Application SecuritySOX, GxP, PCI Regulatory KnowledgeSAP-certified Security or GRC Credentials

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

SAP Authorization ConceptsRole DesignSAP GRC Access ControlFiori SecuritySAP BTP SecuritySAP Process ControlSegregation-of-Duties AnalysisTransport SecurityAudit LoggingContinuous Controls Monitoring

Soft Skills

Excellent CommunicationDocumentation SkillsMentoring

Tools & Technologies

SAP GRCSAP IDMSAP Cloud Identity ServicesXSUAAIASIPSSCIM Integrations

Certifications & Qualifications

SAP-certified Security CredentialsSAP GRC Credentials

Industry Keywords

SOXGxPPCIEnterprise LandscapesAudit RemediationSecurity PoliciesBusiness Processes

Tech Stack

Tools & technologies

Cloud

About the role

Key responsibilities & impact

Design and maintain SAP authorization concepts and role structures aligned with business processes and least-privilege principles
Build and maintain master, derived, composite, and business roles for S/4HANA, ECC, and Fiori applications
Configure and operate SAP GRC Access Control, including ARA, ARM, BRM, EAM, ruleset management, mitigating controls, and emergency access management
Perform segregation-of-duties analysis and remediation with business process owners and internal audit
Configure SAP GRC ARM user-provisioning workflows, request types, approval paths, and IDM/IAM integrations
Operate SAP GRC Process Control for continuous controls monitoring and policy management
Implement security for Fiori applications, including catalogs, groups, and front-end authorizations
Configure and operate SAP BTP and cloud-application security using XSUAA, IAS, and IPS
Support SOX, GxP, and PCI audits and respond to findings with documented remediation plans
Implement transport security, table logging, and audit logging according to internal security policies
Monitor and remediate SAP Security Notes with Basis and DBA teams
Maintain technical documentation, architecture diagrams, design decisions, configuration references, runbooks, and operational procedures
Mentor junior team members and support knowledge transfer across the security team

Requirements

What you’ll need

Bachelor’s degree in Computer Science, Engineering, or a related technical discipline
Five or more years of SAP Security / GRC experience in enterprise landscapes
Strong hands-on experience with SAP authorization concepts and role design
Deep experience operating SAP GRC Access Control (ARA, ARM, BRM, EAM)
Experience supporting SAP audits and remediation activities
Hands-on experience securing Fiori, BTP, and cloud SAP applications
Familiarity with SAP IDM or third-party IGA tooling
Working knowledge of SAP Process Control
Strong understanding of SOX, GxP, and PCI regulatory frameworks
Excellent communication and documentation skills
Willingness to work directly as a full-time W2 employee of Bright Vision Technologies
Must be willing to contribute to in-house SOW deliverables
No new H1B sponsorship available; current valid H1B candidates requiring transfer may apply
Mandatory technical coding assessment
Preferred: SAP-certified Security or GRC credentials
Preferred: Experience with SAP Cloud Identity services (IAS, IPS) and SCIM-based integrations
Preferred: Familiarity with HANA security and analytic privileges
Preferred: Experience with continuous controls monitoring frameworks
Preferred: Exposure to SAP RISE / Grow security operating models

Benefits

Comp & perks

Competitive compensation package
Comprehensive benefits
Supportive work-life balance
Career growth potential
Continuous learning and growth opportunities
Diversity and inclusion
Reasonable accommodations for religious practices, mental health, or physical disability needs
H1B transfer support for qualified candidates