SAP Security Lead

Job Title: SAP Security Lead SAP BRIM / GRC / IAG
Location: Foster City, CA
Employment Type: Contract
Experience: 8 10+ Years

Job Description:

We are seeking an experienced SAP Security Lead with strong expertise in SAP BRIM, SAP S/4HANA Security, SAP GRC, SAP Cloud Identity Services (CIS), and SAP IAG.

Key Responsibilities:

• Design and implement role-based access controls (RBAC) across SAP BRIM, including SAP CC, CI, FI-CA, SOM, and Subscription Billing.
• Lead SAP S/4HANA and Fiori security architecture, role design, authorization management, and provisioning.
• Configure SAP IAG services, including Access Requests, Access Risk Analysis, Access Certification, and Privileged Access Management.
• Manage Segregation of Duties (SoD), emergency access (Firefighter), access reviews, and audit compliance.
• Configure SAP CIS, IAS, and IPS for SSO, MFA, identity synchronization, and user lifecycle management.
• Secure BRIM integrations, APIs, RFCs, web services, and technical/service-user access.
• Support SAP implementations, upgrades, migrations, security remediation, and production troubleshooting.
• Collaborate with BRIM functional teams, prepare security documentation, and support internal and external audits.

Required Qualifications:

• 8 10+ years of SAP Security and GRC/IAG experience.
• 3+ years in a Senior, Lead, or Architect role.
• 5+ years of SAP BRIM or subscription/billing domain experience.
• At least 2 full-lifecycle S/4HANA Security and Fiori implementations.
• Experience with SAP BTP, SAP CIS, and SAP IAG deployments or migrations.
• Strong knowledge of SAP roles, authorizations, SoD, access risk analysis, and emergency access management.

Preferred Skills:

• Microsoft Entra ID or Okta integration.
• Python, PowerShell, Ansible, and CI/CD automation.
• SAP FSM, Signavio, Enterprise Architecture tools, and data privacy frameworks such as GDPR/CCPA