SAP Application Security Consultant (GRC)

Role overview Design and operate SAP application security and governance controls that support appropriate access, compliance, and risk management. The work spans user and role administration, access reviews, audit support, and SAP Governance, Risk, and Compliance (GRC) solutions. The consultant also provides technical direction and team support while coordinating with business, security, and delivery stakeholders.

Responsibilities - Lead or contribute to the design, implementation, enhancement, and ongoing maintenance of user access management. - Create and maintain user roles, assign access, manage provisioning, and conduct access reviews. - Support audits and assess Segregation of Duties (SoD) risks; help remediate findings and maintain compliance. - Analyze, design, develop, and test SAP GRC security components and role models. - Assess specific security needs and recommend controls beyond standard SAP capabilities, potentially including attribute based access control. - Coordinate with functional and technical teams, document standards and procedures, and contribute to work planning and team development.

Requirements - At least five years of SAP application security experience. - Practical experience with SAP user management, role design, access controls, and SoD analysis. - Experience designing, implementing, and supporting SAP GRC solutions. - Relevant SAP security or technical certifications. - U.S. citizenship and eligibility to obtain a government security clearance.

Nice to have - Experience implementing advanced access models such as attribute based access control. - Background supporting federal or other regulated environments, with knowledge of SAP security architecture, compliance, and audits. - Experience leading security teams or large SAP security initiatives. - Prior responsibility for mentoring or training junior colleagues.

Benefits and work setup The listing gives a base salary range of $106,300–$206,300 for specified U.S. states and the District of Columbia; compensation depends on location, skills, experience, and role factors. Benefits are offered, but specific plans are not detailed. Applications are accepted on an ongoing basis.