SAP Application Security and GRC Analyst (Sr.) - U.S. Citizenship Required

SAP Application Security and GRC Analyst (Sr.)

CGI is seeking a Senior SAP GRC and Application Security Analyst to join an SAP S/4HANA Greenfield implementation project for a large government contract. As a senior-level SAP GRC and Application Security Consultant, you will be involved in every stage of the application lifecycle—from design to deployment—and will be responsible for delivering comprehensive SAP security capabilities and solutions within the project's SAP landscapes.

The ideal candidate will serve as a lead with a strong background in SAP application security design, particularly in S/4HANA, S/4HANA Private Cloud, and RISE, in conjunction with SAP GRC, SAP BTP, and other non-SAP tools. You should possess comprehensive knowledge of SAP security structure, user authentication methods, user access and authorization concepts, user activity monitoring, and audit/compliance reporting.

This project operates in a fast-paced and dynamic environment that leverages Agile/Scrum methodology to rapidly build solutions based on customer requirements. You are encouraged to learn new technologies and suggest improvements to business processes. Success in this role will be achieved through your strong technical expertise, proactive problem‑solving abilities, and excellent communication skills with clients.

This position is located in one of CGI Federal's offices in Fairfax, VA, Lebanon, VA, Lafayette, LA or Knoxville, TN; however, a hybrid working model is acceptable. You will be required to work in a CGI Federal office two days per week.

Your Future Duties and Responsibilities

• Collaborate with a team of SAP Security Analysts throughout the project lifecycle to build and implement robust security measures.
• Utilize available tools and applications to provide comprehensive SAP security solutions, adhering to SAP best practices and industry standards.
• Participate in the selection, design, and implementation of security solutions as part of a project team, ensuring alignment with organizational goals.
• Develop, maintain, and enhance a secure SAP environment, with a focus on continuous improvement and risk mitigation.
• Oversee security aspects of system builds, upgrades, patching, client copies, and refreshes, ensuring compliance with security protocols.
• Conduct SAP security workshops with clients and project personnel to educate and align on security practices and strategies.
• Engage proactively with the project team and clients in activities such as requirement gathering and status reporting, ensuring clear communication and collaboration.
• Provide extensive training and leadership to clients and internal teams, fostering a culture of security awareness and expertise.
• Identify and communicate security issues, risks, and opportunities to facilitate timely resolution.
• Deliver SAP security solutions, analytics, reports, and documentation—including TDS, FDS, WRICEF documents, and standard operating procedures (SOPs)—to support project objectives and security compliance.

Required Qualifications to Be Successful in This Role

• Due to the nature of contract requirements, U.S. citizenship and successful completion of a CGI background check are required prior to beginning work. In addition, candidates must have the ability to obtain and maintain a DHS EOD/Public Trust clearance.
• Minimum of 9 years of experience administering SAP security for applications, with at least 5 years in security and controls, consulting stakeholders throughout application implementations.
• Experience in SAP landscape security strategy, architecture, and supporting project implementations with SAP GRC, SAP BTP, and other security tools.
• Strong organizational skills to manage multiple priorities, deliverables, and project milestones, along with excellent analytical, problem‑solving, and communication skills.
• Ability to work effectively with all levels of project and government client personnel, influence change, and manage dynamic environments.
• Experience as a leader for major IT programs involving multiple teams and projects, with the ability to serve as a liaison between business units, technology teams, and project teams.
• Proficiency in Microsoft Office Suite—especially Excel, Project, and PowerPoint—and the ability to work with minimal supervision while maintaining quality and attention to detail.

Desired qualifications:

• Proficiency in SAP application security methodologies, role‑based user authorization, access controls, and Segregation of Duties (SoD) concepts.
• Ability to influence change and manage rapidly evolving technological and business environments.
• Current SAP Security Certification is desirable.
• Project experience within government agencies or the public sector is highly desirable.

CGI is required by law in some jurisdictions to include a reasonable estimate of the compensation range for this role. The determination of this range includes various factors not limited to skill set, level, experience, relevant training, and licensure and certifications. To support the ability to reward for merit-based performance, CGI typically does not hire individuals at or near the top of the range for their role. Compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range for this role in the U.S. is $89,600.00 - $194,000.00.

CGI Federal's benefits are offered to eligible professionals on their first day of employment to include:

• Competitive compensation
• Comprehensive insurance options
• Matching contributions through the 401(k) plan and the share purchase plan
• Paid time off for vacation, holidays and sick time
• Paid parental leave
• Learning opportunities and tuition assistance
• Wellness and well-being programs

Together, as owners, let's turn meaningful insights into action. Life at CGI is rooted in ownership, teamwork, respect and belonging. Here, you'll reach your full potential because...

You are invited to be an owner from day 1 as we work together to bring our Dream to life. That's why we call ourselves CGI Partners rather than employees. We benefit from our collective success and actively shape our company's strategy and direction.

Your work creates value. You'll develop innovative solutions and build relationships with teammates and clients while accessing global capabilities to scale your ideas, embrace new opportunities, and benefit from expansive industry and technology expertise.

You'll shape your career by joining a company built to grow and last. You'll be supported by leaders who care about your health and well-being and provide you with opportunities to deepen your skills and broaden your horizons.

Come join our team—one of the largest IT and business consulting services firms in the world.

Qualified applicants will receive consideration for employment without regard to their race, ethnicity, ancestry, color, sex, religion, creed, age, national origin, citizenship status, disability, pregnancy, medical condition, military and veteran status, marital status, sexual orientation or perceived sexual orientation, gender, gender identity, and gender expression, familial status or responsibilities, reproductive health decisions, political affiliation, genetic information, height, weight, or any other legally protected status or characteristics to the extent required by applicable federal, state, and/or local laws where we do business.

CGI provides reasonable accommodations to qualified individuals with disabilities. If you need an accommodation to apply for a job in the U.S., please email the CGI U.S. Employment Compliance mailbox at View email address on click.appcast.io. You will need to reference the Position ID of the position in which you are interested. Your message will be routed to the appropriate recruiter who will assist you. Please note, this email address is only to be used for those individuals who need an accommodation to apply for a job. Emails for any other reason or those that do not include a Position ID will not be returned.

We make it easy to translate military experience and skills! Click here to be directed to our site that is dedicated to veterans and transitioning service members.

All CGI offers of employment in the U.S. are contingent upon the ability to successfully complete a background investigation. Background investigation components can vary dependent upon specific assignment and/or level of US government security clearance held. Dependent upon role and/or federal government security clearance requirements, and in accordance with applicable laws, some background investigations may include a credit check. CGI will consider for employment qualified applicants with arrests and conviction records in accordance with all local regulations and ordinances.

CGI will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation,