SAP Security and GRC Consultant

$85-$90 per hour

Omaha, NE

Contract

Role : SAP Security SME with BTP and Workzone Cloud Implementations

Must Have:

• Previous experience in SAP security design and architecture and basis or development role.

• Hands-on experience with SAP cloud implementations, specifically SAP BTP (Business Technology Platform) and Work Zone.

• Experience supporting or leading SAP transformations from on-premise environments to cloud-based architectures.

• Experience working on end-to-end SAP implementations or migrations from on-premise to cloud environments.

• Experience with SAP cloud security frameworks and identity/access governance in BTP environments.

• Proficient understanding of SAP systems, identity management, auditing tools, modules, and their integration points to effectively manage and control user access.

• Working and security knowledge tied to SAP vulnerability assessment and management, system monitoring, SIEM and threat management, masking, encryption.

• Working knowledge of SoD (Segregation of Duties) analysis, sensitive transactions analysis, SAP development (includes ABAP), SAP modules, Solution Manager and transport system, basis component, NetWeaver, SAP GUI, and portals.

• Understanding of RFC connections, Fiori and Workzone security for top-down business role and design.

• Strong knowledge of information security principles, frameworks and data protection laws to ensure compliance with the organization’s information security policies.

• Bachelor’s degree in information technology, Computer Science, or a related field.

Good to Have:

• CISSP, other security certification, or SAP security certification.

Experience Level:

• SME level, 15+ years of experience in SAP Security and GRC.

Onshore Location:

• The candidate is expected to work onsite

Desired Profile:

• Designing and implementing security solutions in SAP environments.

• Should have expertise in SAP architecture, role management, access control, and authorization objects.

• Works closely with SAP Basis and development teams to ensure patches are implemented on time and code deployment is tested for security.

• Monitor and perform SOX controls as they relate to SAP Security and GRC.

• Understand security policies, document processes, incidents, and security controls.

• Very good analytical skills and problem-solving ability are a must.

• Very good communication skills.

• Knowledge of Agile development methodology is a plus.

• Must be capable of doing code reviews and mentoring junior developers to drive high-quality deliverables.

• Strong background and culture of delivering projects with first-time-right / zero defects in production.