SAP GRC Consultant :: Onsite :: W2 Position

Role: SAP GRC Consultant

Location: Dallas, TX
Job Type: Contract -W2

Experience: 8+ Years

Job Summary

We are seeking an experienced SAP GRC Consultant with strong expertise in SAP Security and SAP GRC Access Control. The consultant will be responsible for designing, configuring, implementing, and supporting SAP security and GRC solutions across ECC and S/4HANA environments.

The ideal candidate should have hands-on experience with Access Risk Analysis (ARA), Access Request Management (ARM), Business Role Management (BRM), Emergency Access Management (EAM/Firefighter), Segregation of Duties (SoD), PFCG roles, and GRC workflows.

Key Responsibilities

• Design, configure, and maintain SAP Security roles and authorizations.

• Configure and support SAP GRC Access Control.

• Work extensively with:

• Access Risk Analysis (ARA)

• Access Request Management (ARM)

• Business Role Management (BRM)

• Emergency Access Management (EAM/Firefighter)

• User Access Review (UAR)

• Perform SoD and critical access risk analysis and recommend remediation or mitigating controls.

• Configure and maintain GRC rulesets, risk libraries, mitigating controls, and workflows.

• Configure and troubleshoot MSMP workflows and BRF+ rules.

• Create and maintain SAP roles using PFCG.

• Perform user administration, role assignments, provisioning, and access reviews.

• Troubleshoot authorization issues using SU53, SU24, SU01, SUIM, ST01 and related SAP security tools.

• Support SAP ECC, S/4HANA, Fiori, and other SAP applications.

• Support Fiori security including catalogs, spaces, pages, business roles, and authorization concepts.

• Manage and monitor Firefighter IDs and emergency access activities.

• Support SAP GRC integration with backend ECC/S/4HANA systems.

• Participate in SAP implementations, upgrades, migrations, and security remediation projects.

• Work with business process owners, functional teams, auditors, and compliance teams.

• Support SOX, IT internal/external audit, and compliance requirements.

• Prepare security documentation, access matrices, test scripts, SOPs, and audit evidence.

• Provide production support and resolve security/GRC-related incidents.

Required Skills

• 8+ years of experience in SAP Security / SAP GRC.

• Strong hands-on experience with SAP GRC Access Control 10.x/12.x.

• Strong knowledge of:

• ARA

• ARM

• BRM

• EAM / Firefighter

• UAR

• SoD

• Strong SAP Security and authorization experience.

• Hands-on experience with PFCG, SU01, SU24, SU53, SUIM, ST01.

• Experience with MSMP and BRF+ workflow configuration.

• Strong experience with S/4HANA Security and Fiori Security.

• Experience with role design, role remediation, provisioning, and access governance.

• Strong understanding of SAP authorization objects and security concepts.

• Experience supporting audits and compliance requirements.

• Excellent communication and stakeholder management skills.

Preferred Skills

• SAP S/4HANA implementation or migration experience.

• SAP BTP Security.

• SAP Cloud Identity Services / IAS.

• SSO, SAML, OAuth experience.

• Experience with ECC-to-S/4HANA security transformation.

• SAP GRC implementation experience.

• SAP Security/GRC certification.

• Experience working with global SAP landscapes.