SAP Security with GRC Specialist

Job Title: SAP Security with GRC Specialist

Location: Fairfax, VA (Hybrid)
Duration: Long-Term Contract

Job Description:

We are looking for an experienced SAP Security and GRC Specialist to manage SAP security, access controls, risk management, and compliance across SAP environments.

Key Responsibilities:

• Design and maintain SAP security roles, authorizations, and user access across ECC, S/4HANA, BW, and other SAP modules.
• Configure and administer SAP GRC Access Control (AC), Process Control (PC), and Risk Management (RM).
• Perform Segregation of Duties (SoD) analysis, access risk assessments, remediation, and periodic access reviews.
• Manage PFCG roles, authorization objects, user provisioning, SSO, and identity management integrations.
• Support SAP security audits, compliance reporting, and documentation.
• Ensure compliance with SOX, FISMA, FedRAMP, and NIST security frameworks.
• Troubleshoot security issues and support SAP upgrades, transports, and system integrations.

Required Skills:

• Bachelor's degree in IT, Computer Science, or a related field.
• 5+ years of experience in SAP Security and GRC.
• Strong knowledge of SAP authorization concepts, including PFCG, SU01, and SU53.
• Hands-on experience with SAP GRC Access Control 10.x/12.x.
• Knowledge of SAP GRC Process Control, Risk Management, and SoD controls.
• Understanding of SAP Basis, ABAP, SSO, and identity management solutions.
• Knowledge of SOX, FISMA, FedRAMP, and NIST compliance requirements.
• Strong analytical, troubleshooting, communication, and documentation skills.

Preferred Qualifications:

• SAP S/4HANA Security implementation experience.
• Government or public-sector project experience.
• SAP Security/GRC, CISSP, or CISA certifications.
• Experience with SAP cloud solutions and integration technologies.
• Active Secret or Top-Secret security clearance preferred.

Work Arrangement: Hybrid in Fairfax, VA