SAP Security Specialist

RESPONSIBILITIES

Kforce has a client that is seeking an SAP Security Specialist in Broomfield, CO.

About the Role

We are seeking an experienced SAP Security Specialist to support SAP security, access management, governance, and compliance across an enterprise environment. This role will partner with business stakeholders, SAP functional teams, auditors, and technical teams to ensure secure, compliant, and effective access to SAP applications. The ideal candidate will have strong hands-on experience with SAP role design, authorization management, SAP GRC, Segregation of Duties (SoD), and audit support.

Key Responsibilities

• Design, build, maintain, and optimize SAP security roles and authorization models
• Evaluate and improve existing role structures and access controls
• Administer and support SAP GRC Access Control, including workflows and SoD monitoring
• Analyze access risks and recommend appropriate mitigation strategies
• Support SOX compliance, internal controls, and audit evidence collection
• Coordinate periodic user access reviews and certification activities
• Partner with business process owners to validate security requirements and access requests
• Test and validate security changes, role modifications, and GRC configurations
• Support SAP projects, upgrades, and implementations from a security and compliance perspective
• Troubleshoot SAP authorization issues and security-related incidents
• Maintain security documentation, procedures, and standards
• Identify opportunities to automate security administration and compliance processes

REQUIREMENTS:

• Bachelor's degree in IT, Computer Science, Business Information Systems, Cybersecurity, or equivalent experience
• 5+ years of SAP security administration experience
• 3+ years designing and maintaining SAP roles, authorizations, and access controls
• 2+ years administering SAP GRC Access Control or a similar GRC solution
• Experience supporting SOX compliance and audit activities
• Experience with SAP Fiori security, catalogs, groups, spaces, and pages
• Experience testing and validating SAP security changes
• Strong understanding of Segregation of Duties (SoD) and access risk mitigation
• Visa sponsorship is not available for this position
• Applicants selected will be subject to a government security investigation and must meet eligibility requirements for access to classified information

Preferred Qualifications

• SAP Security or GRC certification
• Experience supporting SAP Finance, Supply Chain, Procurement, or Manufacturing environments
• Experience with SAP Private Cloud or RISE with SAP
• Experience with SAP security/GRC tools such as ControlPanelGRC
• Experience supporting external audits
• Strong analytical, troubleshooting, and communication skills
• Ability to work independently and take ownership of security initiatives

The pay range is the lowest to highest compensation we reasonably in good faith believe we would pay at posting for this role. We may ultimately pay more or less than this range. Employee pay is based on factors like relevant education, qualifications, certifications, experience, skills, seniority, location, performance, union contract and business needs. This range may be modified in the future.
We offer comprehensive benefits including medical/dental/vision insurance, HSA, FSA, 401(k), and life, disability & ADD insurance to eligible employees. Salaried personnel receive paid time off. Hourly employees are not eligible for paid time off unless required by law. Hourly employees on a Service Contract Act project are eligible for paid sick leave.

Note: Pay is not considered compensation until it is earned, vested and determinable. The amount and availability of any compensation remains in Kforce's sole discretion unless and until paid and may be modified in its discretion consistent with the law. This job is not eligible for bonuses, incentives or commissions. Kforce is an Equal Opportunity/Affirmative Action Employer.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status. By clicking ?Apply Today? you agree to receive calls, AI-generated calls, text messages or emails from Kforce and its affiliates, and service providers. Note that if you choose to communicate with Kforce via text messaging the frequency may vary, and message and data rates may apply. Carriers are not liable for delayed or undelivered messages.

You will always have the right to cease communicating via text by using key words such as STOP.