SAP Security Specialist / SAP GRC CCM Engineer / Admin

Job Title: SAP Security Specialist / SAP GRC CCM Engineer / Admin

DOD (Dept of Defense) / Department of War (DOW) projects

ship required due to program access requirements.

Must be eligible to obtain DOD Clearance

Duration: up to 12 months Contract with possible extensions

Location: Remote work (Work from home)

Work Schedule: 4/10 First Shift, Monday to Thursday 10 hours per day.

Pay Rate: $100/hr on W2 [the pay rate may differ depending on your skills, education, experience, and other qualifications]

Featured Benefits:

·         Medical Insurance in compliance with the ACA

·         401(k)

·         Sick leave in compliance with applicable state, federal, and local laws

Required Skills:

SAP GRC CCM Expertise
• In‑depth knowledge of SAP GRC Continuous Control Monitoring (CCM) architecture and data model
• Ability to design, configure, and maintain CCM rules, data sources, and monitoring plans

Engineering Methodology
• Experience with standard engineering process
• Background in doing requirements discovery and translation from business requirements to technical requirements / deliverable
• Experience with software systems design

Data Integration & Extraction
• Connecting CCM to SAP source systems (SAP ECC, S/4HANA, BW, CRM, MDG, GTS, Solution Manager/Focused Build, Ariba, SuccessFactors) via RFC, OData, or SAP Extraction Framework
• Experience with non‑SAP data sources (SQL Server, Oracle, flat files) using SAP Data Services or SAP Cloud Platform Integration

Rule Development & Testing
• Building business‑rule logic using SAP Business Rules Framework (BRFplus) and CCM rule editor
• Conducting unit‑ and integration‑testing, handling rule versioning and change‑management

Alert Management & Workflow
• Configuring alert thresholds, escalation paths, and automatic remediation workflows
• Integration with SAP GRC Access Control, Process Control, and external ticketing systems (ServiceNow, Remedy)

Reporting & Analytics
• Designing dashboards and KPI visualizations in SAP Analytics Cloud, SAP Lumira, or Power BI for CCM results
• Generating periodic compliance and audit‑ready reports

Compliance & Regulatory Knowledge
• Understanding of SOX, GDPR, ISO 27001, NIST, and industry‑specific controls that benefit from continuous monitoring
• Mapping CCM controls to Sensitive Access Risks and audit frameworks

SAP Basis & Landscape Understanding
• Familiarity with SAP system landscapes, transport management (CTS), and performance considerations for high‑volume data extraction
• Coordination with Basis for system sizing, scheduling, and security authorizations (PFCG roles)

Scripting & Automation
• Basic ABAP/ABAP Objects for custom data extraction or enhancement
• Use of PowerShell, Python, or Bash scripts to automate data loads, rule deployments, and report distribution

Problem‑Solving & Incident Response
• Monitoring CCM job logs, diagnosing data latency or rule failures, and implementing corrective actions
• Collaboration with IT security and audit teams for rapid remediation of control violations

Project & Change Management
• Leading CCM implementation or upgrade projects (Agile or Waterfall)
• Managing change requests, documentation, and stakeholder communication

Communication & Training
• Producing clear documentation of CCM configurations, control mappings, and operating procedures
• Training business owners, auditors, and end‑users on CCM functionality and interpretation of alerts