Description:
Chipton-Ross is seeking a SAP Security Specialist for a remote contract opportunity.
BASIC QUALIFICATIONS (REQUIRED SKILLS/EXPERIENCE): The following details required and desired skills for this position: SAP GRC Suite Expertise Business Process, Risk/Ruleset management, and Process Controls Development and Management Hands-on experience of leading the business through risk analysis and remediation Deep knowledge of SAP GRC components: Access Control (AC), Process Control (PC), Risk Management (RM), and Audit Management (AM) Experience configuring and maintaining GRC solutions (role design, SoD rules, workflow setup, remediation) Access Control (AC) Designing, testing, and maintaining composite and single roles Managing SoD matrices, risk analysis, and remediation projects Using tools such as Access Risk Analyzer (ARA), Role Manager, and Business Role Builder Engineering Methodology Experience with standard engineering process Background in doing requirements discovery and translation from business requirements to technical requirements / deliverable Experience with software systems design Process Control & Risk Management Building internal controls, monitoring plans, and audit workpapers Configuring continuous control monitoring (CCM) and KPI dashboards Conducting risk assessments and documenting control effectiveness Compliance & Audit Understanding of regulatory frameworks (SOX, GDPR, ISO 27001, FISMA, etc.) Ability to generate audit-ready reports and evidence Coordination with internal and external auditors SAP Basis & Integration Fundamentals of SAP NetWeaver, S/4HANA, and system landscape management Transport management (CTS) for GRC objects Integration with SAP Identity Management (IdM) and third-party IAM solutions Technical Tools & Scripting Proficiency with GRC configuration tools (PFCG, GRAC, GRPC, GRRM) Basic ABAP debugging for security-related enhancements Automation scripts (PowerShell, Python, Bash) for user provisioning and report generation Security Incident Management Monitoring GRC alerts, handling violations, and executing remediation steps Collaboration with SAP Basis and IT security teams for patches and hardening Project & Change Management Experience leading GRC implementation or upgrade projects (Agile or Waterfall) Managing change requests, documentation, and stakeholder communication Data Analysis & Reporting Building regular SoD, risk, and compliance reports (using SAP GRC reporting, Excel, Power BI) Analyzing large user-role datasets to identify anomalies Communication & Training Clear documentation of GRC policies, procedures, and role designs Conducting training sessions for functional users and auditors Liaising with business owners, security teams, and IT partners Soft Skills Strong analytical and problem-solving abilities High attention to detail and accuracy Proactive attitude and willingness to stay current with GRC best practices and regulatory changes
