SAP Security/GRC

Job Summary

Serve as a technical lead focused on SAP Security, SAP GRC Access Control, and ABAP Authorization, guiding secure solution architecture and implementation for enterprise platforms within a hybrid work model. Use advanced access control knowledge to protect critical financial processes, support accurate invoice management and cash application, and ensure alignment with internal risk policies and external regulatory expectations.

Responsibilities

• Lead end-to-end design and implementation of SAP Security solutions that safeguard core business processes while meeting enterprise security standards and compliance requirements.
• Manage configuration and ongoing maintenance of SAP GRC Access Control to reduce risks, enforce preventive controls, and streamline user provisioning across complex system landscapes.
• Deliver specialized guidance on ABAP Authorization to establish strong object-level controls that prevent unauthorized access and protect sensitive financial and operational data.
• Drive ongoing enhancements to role design approaches by reviewing existing access challenges, improving authorization structures, and reducing maintenance effort for support teams.
• Partner with functional and technical teams to convert business requirements into secure, efficient security designs that support finance and invoice workflows.
• Coordinate recurring access reviews and risk assessments across SAP environments to detect control weaknesses, propose remediation measures, and confirm compliance with audit obligations.
• Assist incident investigation and resolution by evaluating authorization failures, mapping access paths, and recommending corrective actions that limit impact to business operations.
• Enable effective hybrid collaboration by documenting configuration standards, sharing reusable security patterns, and mentoring peers through structured technical knowledge transfer.
• Engage with finance stakeholders to understand how maintaining open invoices and applying cash to invoices interacts with security settings, ensuring controls do not delay timely processing.
• Build and improve firefighter and emergency access processes in SAP GRC to provide controlled elevated access while maintaining accountability and detailed activity tracking.
• Coordinate testing of security roles and GRC rulesets during project releases to confirm that newly introduced capabilities remain compliant, secure, and suitable for day shift operational teams.
• Track and assess new SAP Security and SAP GRC leading practices, recommending strategic improvements that support the company mission of secure and reliable digital operations for society.
• Document security configurations and access control decisions with clear rationales to ensure future enhancements can be delivered efficiently with predictable risk outcomes.

Qualifications

• Demonstrate strong hands-on experience in SAP Security, including role design, authorization troubleshooting, and secure configuration of core finance and logistics modules.
• Provide proven expertise in SAP GRC Access Control, including risk analysis, access request workflows, firefighter setup, and ruleset optimization for large enterprises.
• Apply a solid understanding of ABAP Authorization objects and field-level controls to develop accurate, reliable, and maintainable authorization concepts for both custom and standard programs.
• Have practical working knowledge of business processes related to maintaining open invoices and applying cash to invoices, ensuring security solutions support accurate account reconciliation.
• Show the ability to work effectively in a hybrid work model and coordinate with global stakeholders through structured communication and comprehensive technical documentation.
• Demonstrate strong analytical and problem-solving abilities to evaluate complex access issues and propose solutions that balance usability, compliance, and system performance.

Certifications Required

SAP Certified Technology Specialist Security or SAP GRC certification preferred for access control and authorization expertise.