SAP GRC Expert

Salary: $90,300 - 189,600 per year Requirements:

• Interim Secret clearance at minimum
• At least 7 years of SAP GRC experience, including 3 or more years supporting DoD or federal environments
• Expert knowledge of SAP GRC Access Control 12.x, including role design, SoD analysis, risk rules, and business role management
• Strong experience in entitlement governance and role lifecycle management; in-depth knowledge of SAP authorization structures and composite role architecture
• Understanding of SAP attributes including Company Code, Cost Center, Profit Center, Plant, Personnel Number, and Organizational Unit
• Hands-on experience integrating GRC with identity platforms such as Okta, Active Directory, and LDAP
• Ability to configure and maintain emergency access workflows with monitoring and alerting
• Experience supporting RMF/ATO, eMASS controls, and compliance evidence cycles
• Knowledge of Zero Trust Policy Administration Point (PAP) architecture
• DoD 8140 Foundational 461 qualification (Systems Security Analyst – Intermediate or above)
• One or more of the following certifications: CCSP, Cloud+, GICSP, GISF, GSEC, or Security+
• SAP GRC Access Control certification
• DoD 8140 Residential qualification, as applicable
• Preferred: SAP Security certification
• Desired: Experience with SAP GRC Process Control and Risk Management modules; familiarity with Splunk ES for SAP audit monitoring; understanding of ACAS/Tenable.SC scanning for SAP compliance; and knowledge of AWS IAM Identity Center permission sets and integration patterns

• Serve as the SAP GRC subject matter expert for the ISSO team, strengthening governance, risk mitigation, and compliant access across the IL5 S/4HANA environment
• Oversee role design, lifecycle management, and entitlement hygiene
• Enforce and improve Segregation of Duties rules, mitigation controls, and access risk analysis
• Lead access review campaigns and certification cycles, ensuring accurate and timely completion
• Manage integrations between SAP GRC and identity systems, including Okta, Active Directory, and LDAP
• Configure and maintain emergency access (Firefighter) procedures, including AO authorization and SIEM alerting
• Support ongoing compliance through RMF/ATO documentation, eMASS updates, CORA evidence preparation, and coordination of Cyber and Audit workflows
• Contribute to Zero Trust architecture through PAP policy models and secure access patterns

• AWS
• Active Directory
• Cloud
• IAM
• Support
• LDAP
• SAP S/4HANA
• SAP
• Security
• Splunk

More:

We are hiring a full-time, regular SAP GRC Expert to join our mission-driven cyber and SAP security team supporting a high-visibility IL5 SAP S/4HANA environment. This role offers the opportunity to help shape a modern, Zero Trust-aligned security posture and influence enterprise risk decisions in partnership with Cyber and Audit teams. Travel is local and may be up to 10%; the position can be based in more than one location. Our culture emphasizes integrity, innovation, trust, and meaningful customer missions. We provide flexible time off, learning and development resources, competitive compensation, and benefits covering healthcare, wellness, financial and retirement support, family needs, continuing education, and time off. The proposed national average salary range is $90,300–$189,600; final compensation depends on factors such as location, contract requirements, experience, skills, education, and certifications. We are an equal opportunity employer and consider qualified applicants without regard to protected characteristics.

last updated 42 week of 2026