SAP Security/GRC

Job Summary

Act as a technical lead specializing in SAP Security, SAP GRC Access Control, and ABAP Authorization, providing expert guidance on secure solution architecture and implementation for enterprise platforms in a hybrid work environment. Use deep access control knowledge to protect mission-critical financial processes, enable accurate invoice management and cash application, and ensure compliance with internal risk requirements and external regulatory expectations.

Responsibilities

• Own end to end design and implementation of SAP Security solutions that safeguard core business processes while meeting enterprise security standards and compliance responsibilities.
• Manage configuration and ongoing maintenance of SAP GRC Access Control to reduce risk, enforce preventive controls, and improve user provisioning across complex system landscapes.
• Provide specialist direction on ABAP Authorization principles to ensure reliable object level protections that block unauthorized access and protect sensitive financial and operational data.
• Drive continuous enhancement of role design methodologies by evaluating current access challenges, refining authorization structures, and reducing maintenance complexity for support teams.
• Partner with functional and technical teams to convert business needs into secure, efficient security designs that support finance and invoice operations.
• Coordinate scheduled access reviews and risk assessments across SAP environments to detect control gaps, recommend remediation measures, and confirm alignment with audit requirements.
• Assist with incident investigation and resolution by reviewing authorization failures, mapping access paths, and proposing corrective actions that limit disruption to business operations.
• Enable effective hybrid collaboration by documenting configuration standards, sharing reusable security patterns, and mentoring team members through structured technical knowledge transfer.
• Work with finance stakeholders to understand how open invoice maintenance and cash application to invoices interact with security settings, ensuring controls support timely processing.
• Develop and improve firefighter and emergency access processes in SAP GRC to support controlled elevated access while maintaining accountability and detailed activity tracking.
• Coordinate security role and GRC ruleset testing during project releases to verify that new functionality remains compliant, secure, and usable for day shift operational teams.
• Stay current on SAP Security and SAP GRC leading practices, recommending strategic improvements that support the company mission of secure and reliable digital operations for society.
• Document security configurations and access control decisions with clear rationales to ensure future enhancements can be delivered efficiently with predictable risk impact.

Qualifications

• Demonstrate strong hands on experience in SAP Security, including role design, authorization troubleshooting, and secure configuration of core finance and logistics modules.
• Show proven expertise in SAP GRC Access Control, including risk analysis, access request workflows, firefighter setup, and ruleset optimization in large enterprise environments.
• Apply a strong understanding of ABAP Authorization objects and field level controls to produce accurate, scalable, and maintainable authorization concepts for custom and standard programs.
• Maintain practical familiarity with business processes related to keeping open invoices current and applying cash to invoices, ensuring security solutions support correct account reconciliation.
• Ability to work effectively within a hybrid work model and coordinate with global stakeholders through structured communication and detailed technical documentation.
• Exhibit strong analytical and problem solving skills to evaluate complex access challenges and propose solutions that balance usability, compliance, and system performance.

Certifications Required

SAP Certified Technology Specialist Security or SAP GRC certification preferred for access control and authorization expertise.