SAP GRC/Security

Job Summary

This hybrid Technology Architect position centers on designing and governing secure SAP landscapes, with a strong focus on SAP Security, SAP GRC Access Control, and ABAP Authorization for complex enterprise environments. The architect will convert business risk requirements into scalable security architectures, establish effective compliance controls, and support implementation teams with durable solutions that safeguard critical data assets while allowing efficient business operations.

Responsibilities

• Design end to end SAP security architectures that reflect enterprise risk posture and compliance goals, while enabling scalable business processes across multiple SAP systems and modules
• Manage the configuration and enhancement of SAP GRC Access Control components to enforce risk based access policies and ensure consistent governance for user provisioning and access review activities
• Deliver authoritative support for ABAP Authorization design, including role creation, authorization objects, and permission strategies, to reduce risk exposure and streamline access management workflows
• Lead a comprehensive evaluation of existing SAP security controls and GRC frameworks to uncover gaps, propose remediation measures, and prioritize improvements to strengthen overall security resilience
• Create detailed security design documentation and standards covering role segregation of duties guidelines, workflow configurations, and control mechanisms so implementation teams can follow established practices
• Partner with functional consultants and technical developers to integrate security and authorization requirements into solution designs, ensuring traceability to regulatory and business obligations
• Coordinate recurring reviews of user access risk violations, audit findings, and compliance reports produced through SAP GRC and related tooling, converting insights into actionable improvement plans
• Direct performance optimization and stability of authorization checks in ABAP and SAP applications, maintaining secure operations without degrading response times or day to day user experience
• Establish strong transport management controls, change governance processes, and emergency access handling procedures across SAP landscapes to lower operational risk and sustain audit readiness
• Enable effective hybrid collaboration by defining secure connectivity guidance, device access standards, and data protection practices that support flexible working while safeguarding sensitive information
• Advance the company purpose by delivering security solutions that protect mission critical data and processes, supporting dependable delivery of products and services that positively impact clients and communities
• Advise stakeholders on securely integrating domain knowledge of data models and computational biology with SAP platforms where applicable, ensuring suitable protection of research and analytical data assets
• Document architecture decisions, reusable patterns, and security baselines in a clear format to help teams maintain secure operations and reduce onboarding time for new initiatives

Qualifications

• Possess extensive experience in SAP Security across multiple modules with proven ability to design and maintain complex role structures and authorization concepts for large scale organizations
• Demonstrate strong hands on expertise in SAP GRC Access Control including configuration of risk rules user provisioning workflows access risk analysis and periodic access review processes
• Show advanced proficiency in ABAP Authorization concepts including authorization objects role design field level restrictions and troubleshooting of authorization issues in custom and standard applications
• Bring practical exposure to enterprise data models with capability to interpret how data structures and relationships influence access control strategies and security design for business critical information
• Exhibit familiarity with computational biology or similar analytical domains enabling secure handling of research data models and specialized workflows where they intersect with SAP and related systems
• Display solid understanding of compliance frameworks and audit requirements relevant to SAP environments such as risk management controls and documentation standards that support external and internal reviews
• Apply strong problem solving communication and collaboration skills to work effectively in a hybrid setting coordinating with cross functional teams and stakeholders across locations and time zones
• Utilize minimum ten years and up to fourteen years of progressive experience in SAP technology and security architecture to independently drive complex assignments and deliver dependable outcomes for the organization

Certifications Required

Preferred certifications include SAP Certified Technology Specialist, SAP System Security Architect, and SAP GRC Access Control certification or equivalent security focused credentials