Sap Grc Security

Job Summary

This hybrid Technology Architect role is focused on creating and governing secure SAP landscapes, with a strong emphasis on SAP Security, SAP GRC Access Control, and ABAP Authorization in complex enterprise environments. You will convert business risk requirements into scalable security architectures, establish reliable compliance control measures, and mentor implementation teams toward sustainable solutions that protect critical data assets while supporting efficient business operations.

Responsibilities

• Design end to end SAP security architectures that reflect enterprise risk posture and compliance goals, while enabling scalable business processes across multiple SAP systems and modules
• Lead the setup, configuration, and ongoing optimization of SAP GRC Access Control components to enforce risk based access policies and maintain consistent governance for user provisioning and access review activities
• Deliver specialist support for ABAP Authorization design, including role creation, authorization objects, and permission strategy development to reduce risk exposure and streamline access management workflows
• Perform comprehensive evaluations of current SAP security controls and GRC frameworks to uncover gaps, propose remediation steps, and prioritize enhancements that improve overall security resilience
• Create detailed security design documentation and standards defining segregation of duties requirements, workflow configurations, role-based rules, and control mechanisms for implementation teams
• Partner with functional consultants and technical developers to embed security and authorization requirements into solution designs, ensuring traceability to regulatory and business obligations
• Coordinate recurring reviews of user access risk violations, audit findings, and compliance reports produced through SAP GRC and related tools, and translate results into practical improvement action plans
• Support performance tuning and stability of authorization checks within ABAP and SAP applications, ensuring secure operations without negatively affecting response times or the end user experience in everyday business activities
• Establish reliable controls for transport management, change governance, and emergency access handling across SAP landscapes to lower operational risk and maintain strong audit readiness
• Support hybrid work collaboration by defining secure connectivity guidance, device access standards, and data protection practices that enable flexible work while protecting sensitive information
• Align with company purpose by designing security solutions that safeguard mission critical data and processes, enabling dependable delivery of products and services that positively impact clients and communities
• Advise stakeholders on securely incorporating domain understanding of data models and computational biology with SAP platforms where applicable, ensuring proper protection of research and analytical data assets
• Document architecture decisions, reusable patterns, and security baselines in a clear format that supports sustained secure operations and reduces onboarding time for new initiatives

Qualifications

• Have extensive experience in SAP Security across multiple modules, with proven capability to design and manage complex role structures and authorization models for large scale organizations
• Demonstrate strong hands on expertise in SAP GRC Access Control, including configuration of risk rules, user provisioning workflows, access risk analysis, and periodic access review processes
• Show advanced proficiency in ABAP Authorization principles, including authorization objects, role design, field level restrictions, and troubleshooting authorization issues in both custom and standard applications
• Bring practical experience with enterprise data models, including the ability to understand how data structures and relationships shape access control strategies and security design for business critical information
• Demonstrate familiarity with computational biology or closely related analytical disciplines to support secure handling of research data models and specialized workflows where they intersect with SAP and connected systems
• Maintain solid knowledge of compliance frameworks and audit requirements applicable to SAP environments, including risk management controls and documentation standards needed for external and internal reviews
• Use strong problem solving, communication, and collaboration skills to work effectively in a hybrid environment, coordinating with cross functional teams and stakeholders across locations and time zones
• Use minimum ten years and up to fourteen years of progressive experience in SAP technology and security architecture to independently manage complex assignments and deliver dependable organizational outcomes

Certifications Required

Preferred certifications include SAP Certified Technology Specialist, SAP System Security Architect, and SAP GRC Access Control certification or equivalent security focused credentials