SAP GRC Access Control and SAP S/4HANA Security Specialist
Washington, DC - Travel
Pay rate: $70/Hour - $75/Hour
Role Overview
We are seeking an experienced SAP GRC Access Control Specialist with SAP S/4HANA expertise to design, configure, and maintain our access governance, emergency access, and Segregation of Duties (SoD) framework. In this role, you will be responsible for end-to-end MSMP workflow design, Emergency Access Management (EAM), User Access Reviews (UAR), continuous risk analysis, and adapting GRC rules/workflows to support our S/4HANA and Fiori environment.
Key Responsibilities
S/4HANA & Security Integration (Core Focus)
-
S/4HANA Access Governance: Adapt and optimize GRC Access Control rules, SoD risk matrices, and workflows specifically for SAP S/4HANA, including Fiori catalogs, target mappings, business roles, and S/4-specific authorization objects.
-
Connector & Infrastructure Management: Setup, Maintain and troubleshoot GRC AC connectors to S/4HANA and other target systems.
SAP GRC Access Control Configuration & Operations
-
MSMP Workflow Setup: Design, configure, and maintain Multi-Stage Multi-Path (MSMP) workflows for Access Risk Management (ARM), custom path routing, agent definitions, notification templates, and BRFplus decision rules.
-
Emergency Access Management (EAM): Configure and manage Firefighter IDs (FFIDs), Firefighter roles, owners, controllers, reason codes, and automated EAM log review workflows across S/4HANA environments.
-
Access Reviews & Certifications: Plan, launch, and manage periodic User Access Reviews (UAR) and SoD Role Re-certifications, streamlining manager and process owner approval workflows.
-
Risk Analysis & Remediation (ARA): Configure Segregation of Duties (SoD) and Sensitive Access risk matrices for S/4HANA business processes, run risk analysis reports, and manage mitigating controls/assignments.
-
Audit & Compliance Support: Audit Firefighter usage, log reviews, and access request approvals to ensure strict compliance with SOX and internal audit standards.
Required Skills & Qualifications
Required Skills
-
SAP S/4HANA Experience (Required): Proven hands-on experience configuring GRC Access Control specifically within an SAP S/4HANA ecosystem, including deep knowledge of S/4HANA security concepts, Fiori tile/launchpad security, and updating GRC rule sets for S/4 processes.
-
SAP GRC Access Control Expertise: Deep functional and technical hands-on experience in SAP GRC AC 12.0 covering ARA, ARM, EAM, and BRM modules.
-
MSMP & BRF+ Rule Engine: Strong proficiency in configuring MSMP workflows, defining custom stages, paths, notification templates, and maintaining BRFplus decision tables/rules.
-
EAM / FFID Governance: Solid experience setting up Firefighter IDs, controller assignments, notification alerts, and auditing EAM log reviews in S/4HANA.
-
Access Review Administration: Proven capability in running UAR campaigns, tracking completion, and enforcing access revocation/remediation.
Preferred / Nice-to-Have Skills
-
IAM Integration: Experience integrating GRC AC with enterprise Identity & Access Management systems (e.g., Azure AD, SailPoint, Okta).
-
Certification: SAP Certified Application Associate – SAP Access Control / SAP Security.
Soft Skills
-
High attention to detail regarding security compliance, risk mitigation, and audit trails.
-
Strong communication skills to train Firefighter owners, controllers, and business approvers.
-
Collaborative mindset to work closely with IT, Internal Audit, and Risk Management teams.
The Company offers the following benefits for this position, subject to applicable eligibility requirements: medical insurance, dental insurance, vision insurance, 401(k) retirement plan, life insurance, long-term disability insurance, short-term disability insurance, paid parking/public transportation, paid time off, paid sick and safe time, hours of paid vacation time, weeks of paid parental leave, and paid holidays annually – as applicable.