SAP Security and Grc Specialist

Qualifications& experience

Bachelor’s or master’s degree in computer science, IT Security, or a related field, or an equivalent combination of education and professional experience 5+ years of experience in the design, configuration, development, and support of role-based authorization concepts, enabler, and derived, composite, and Fiori role design, and implementation for S/4HANA and GRC Systems. 5+ years of experience with SAP S/4 HANA, with in-depth knowledge of SAP security architecture and design. Processes comprehension and high level knowledge of SAP modules FI, MM, PM, SD, and HR-PY. Experience in at least 2 SAP implementations within Security and GRC workstreams. Proficiency in SAP Authorization Concepts, as well as the technical design, build, and troubleshooting of SAP security functions, ensuring compliance with Segregation of Duties and SAP best practices.Previous experience with other SAPsolutions —including Group Reporting, Success Factors, and SAC—as well astechnical tools such as BTP, IAS, and SSO, is highly beneficial.SAP Academy or CISA certifications are an asset. Experience with SOX controls, IT General Controls (ITGC) concepts and audit testing process is a strength. Demonstrates proactiveness, an innovative approach, strong risk awareness, and well-developed interpersonal and communication skills.Note: Need Spanish speaking and support PST times, anywhereNearshore is fine.

Projects

Need Spanish speaking and support PST times, anywhere Nearshore is fine . Evaluate and assess role changes requests from Corporate and the sites, ensuring alignment with SoD principles as well as our internal procedures and organizational structure. Manage the maintenance and improvements of our GRC Access Risk Analysis (ARA) and Emergency Access Management (EAM) practi

KeyResponsibilities

SAP Security Roles

• Provide support with Corporate andvendors' user access and roles assignment.
• Evaluate andassess role changes requests from Corporate and the sites, ensuring alignmentwith SoD principles as well as our internal procedures and organizational structure.
• Offer immediate assistance andresolve high-priority authorization problems.
• Follow up on open servicerequests, incidents, and testing tasks. Work together with the AMS Securityconsultants, internal business users, and IT colleagues from all sites.
• Take part in upcoming SAPinitiatives—including Fiori, new SAP modules, partner solutions, and organizationalchanges—in the security workstreams, ensuring adherence to SoD standards,industry best practices, and harmonization with internal procedures.
• Open tolearn and manage security roles in SAP Cloud solutions like BTP, IAS,SuccessFactors, Concur, and SAC.

SAP GRC Access Control and Risk Analysis

• Manage the maintenance andimprovements of our GRC Access Risk Analysis (ARA) and Emergency AccessManagement (EAM) practice.
• Support in extending our GRCfootprint with modules such as Access Request Management (ARM), Business RoleManagement (BRM), and User Access Review (UAR).
• Propose new GRC solutions and featuresthat can improve the organization’s risk and compliance posture. Increaseawareness about security and compliance issues among businessstakeholders and SAP users.

Audit andCompliance

• Extract data for User AccessReviews and SoD Reports; assist with analysis and corrective actions.
• Use SAP GRC reports, SecurityInfo System (SUIM), and IT Service Desk system to provide information for theSOX and ITGC Audits.
• Address SAP STAR report findingsto manage FUE License usage across sites.
• Build SOP regarding audit tasks to seekautomation opportunities.
• Internal Monitoring of GRC EAM and SoDreports along with security roles risk findings, awareness across sites andfollow-up on solutions.

• Previous experience with other SAP solutions —including Group Reporting, Success Factors, and SAC—as well as technical tools such as BTP, IAS, and SSO.
• SAP Academy or CISA certifications are an asset.
• Experience with SOX controls, IT General Controls (ITGC) concepts and audit testing process is a strength.