SAP Security & GRC Specialist

Your Opportunity The SAP Security & GRC Specialist is responsible for performing all User Management (UM) functions such as user role creations, changes, assignments, and activities, including User Access Review, UM audit requests, and Segregation of Duties (SOD) Risk Assessment.

What you will do

• Develop and implement SAP security governance frameworks tailored to the organization’s needs and aligned with global IT and security best practices.
• Ensure compliance with corporate information security policies and local / international regulations (e.g., SOX, GDPR, LGPD) within SAP environments.
• Regularly review and update SAP security policies, procedures, and standards.
• Conduct periodic audits across SAP systems (e.g., ECC, S / 4HANA, SAP B1) to ensure adherence to defined security controls, especially Segregation of Duties (SoD).
• Implement corrective actions to address identified vulnerabilities or non-compliance issues.
• Identify and assess SAP-related security risks and collaborate with stakeholders to define mitigation strategies.
• Maintain and periodically review SAP security risk management plans.
• Monitor and analyze SAP security performance indicators to identify improvement opportunities and support continuous improvement initiatives.
• Lead or actively participate in the design, implementation, and maintenance of User Access Management (UAM) processes for SAP systems.
• Design, review, and maintain SAP roles and authorization objects in accordance with SoD principles and security management standards.
• Analyze, design, implement, and test SAP GRC (Governance, Risk, and Compliance) components, such as Access Control, ARA (Access Risk Analysis), EAM (Emergency Access Management), BRM (Business Role Management), and ARM (Access Request Management).
• Support automation of user provisioning and access control processes, including integration with Active Directory and Identity & Access Management (IAM) tools.
• Work closely with project teams, internal / external auditors, information security, and compliance departments.
• Ensure that SAP Security activities are aligned with corporate governance policies and SOX audit requirements.
• Stay current with evolving security threats, SAP security patches, and relevant technology developments.

What we are looking for

Education Requirements

Technical Requirements