Apply on Employer Site

SAP · 2 weeks ago

SAP NS2 Intel Enterprise Software Application Security and Governance, Risk & Compliance (GRC)TS/SCI

Herndon, VA

Full-time

Onsite

Mid, Senior Level

$121K/yr - $254K/yr

5+ years exp

SAP is the global market leader for business software and related services, and they are seeking a Security and GRC Consultant to lead their security and controls team. The role involves delivering and maintaining solutions that meet complex client needs while managing SAP/other enterprise software application security and GRC.

AnalyticsBusiness IntelligenceBusiness Process Automation (BPA)ComputerData ManagementFinanceSoftware

Growth Opportunities

No H1B

Security Clearance Required

U.S. Citizen Only

Responsibilities

Leading our security and controls team in delivery and maintenance of solutions that meet our client’s complex needs

Design, configure, develop, and maintain SAP/other enterprise software roles (composite and single) to align with business requirements

Participate in role redesign projects during upgrades or business transformations

Deep understanding of SAP/other enterprise software authorization concepts catering to SAP ECC, SAP S/4 HANA systems, and SAP GRC Access Control (10.x and 12.x)

Experience in Security/GRC implementation and maintenance, to include minor enhancements as well as support pack/version upgrades

Extensive hands-on experience with GRC master data creation and maintenance, performing risk analysis and remediation activities, batch job monitoring, audit & compliance support activities (user management controls, access certification, etc.), and BRF+ and MSMP workflows

Ability to effectively and efficiently troubleshoot security access issues, interacting with key functional/business stakeholders as necessary in order to resolve SAP/other enterprise software Security/GRC errors/exceptions

Keeps oneself constantly abreast of the latest advancements on SAP ECC, S/4 HANA, and other emerging security authorization concepts

Knows the risks associated with enterprise application security vulnerabilities, and proposes solutions to eliminate and/or mitigate those risks

Understanding of NIST, SOX, SOD, and SAP IT General Computer Controls, how these compliance requirements impact security, and provide solutions to address them

Support, develop, and enable junior team members

Provide SAP security technical training to client counterparts, as needed

Qualification

SAP GRC Access ControlSAP ECC/S/4 HANAEnterprise application securityCloud environment experienceNIST compliance knowledgeTechnical trainingTroubleshooting skillsTeam leadership

Required

5-8+ years' experience managing SAP/other enterprise software application security and SAP/other enterprise software GRC Access Control for the client's SAP landscape, from development up to production

Ability to design, configure, develop, and maintain SAP/other enterprise software roles (composite and single) to align with business requirements