SAP Test Lead with GRC Security, EAM & ARA

Job Title: SAP Test Lead with GRC Security, EAM & ARA Location: Raleigh, NC [Onsite / Hybrid ] Experience: 8 12+ years (SAP Testing / SAP Security / GRC

Role Summary: We are seeking an experienced Test Lead to own and drive the testing strategy and execution for the implementation of Pathlock Cloud, specifically the Emergency Access Management (EAM) and Access Risk Analysis (ARA) modules.

The role requires deep expertise in SAP security testing, complex SAP landscapes, and stringent audit-driven testing requirements, across a large SAP ecosystem including SAP ECC / S/4HANA and SAP BTP.

The Test Lead will work closely with SAP Security, GRC, Basis, Functional teams, auditors, and Pathlock implementation partners to ensure a high-quality, compliant, and production-ready solution.

Key Responsibilities

Test Strategy & Planning

• Define the overall test strategy for Pathlock Cloud EAM and ARA modules, aligned with compliance, audit, and risk requirements
• Prepare detailed test plans, scope, timelines, entry/exit criteria, and dependencies
• Establish test governance, standards, and reporting mechanisms

Test Design & Execution

• Design and oversee functional, integration, regression, UAT, and negative test scenarios for:
• Emergency access provisioning, firefighting IDs, approvals, logging, and monitoring (EAM)
• SoD rules, risk analysis, simulations, mitigations, and reporting (ARA)
• Ensure coverage across:
• SAP ECC / S/4HANA systems
• SAP BTP integrations
• Interfaces, RFCs, roles, and authorization objects
• Validate end-to-end access lifecycle scenarios, including provisioning, escalation, monitoring, and decommissioning

Compliance, Audit & Risk Focus

• Ensure testing meets SOX, audit, and internal control requirements
• Validate Pathlock controls against security policies and regulatory standards
• Prepare audit-ready test evidence, documentation, and traceability matrices
• Support internal and external audits with clear testing artifacts

Stakeholder Collaboration

• Work closely with:
• SAP Security & GRC teams
• SAP Basis and Functional teams
• Business users for UAT
• External auditors and Pathlock implementation partners
• Act as the single point of accountability for testing across EAM and ARA modules

Required Skills & Experience

Mandatory

• Strong experience as a Test Lead / Test Manager in SAP environments
• Hands-on experience with Pathlock Cloud, especially:
• Emergency Access Management (EAM)
• Access Risk Analysis (ARA)
• Deep understanding of SAP security, roles, authorizations, and SoD concepts
• Experience testing large, complex SAP landscapes
• Exposure to SAP ECC / S/4HANA and SAP BTP
• Strong knowledge of compliance, audit, and control-based testing
• Expertise in creating detailed test cases, test scenarios, and traceability matrices
• Excellent stakeholder communication and coordination skills

Nice to Have

• Prior experience with SAP GRC (AC, EAM, ARM) or migration from SAP GRC to Pathlock
• Experience with identity and access management (IAM) integrations
• Knowledge of automated testing tools for SAP security (where applicable)
• Certifications in SAP, Testing (ISTQB), or Security/GRC