Job Title: SAP Security Specialist / SAP GRC CCM Engineer / Admin
DOD (Dept of Defense) / Department of War (DOW) projects
ship required due to program access requirements.
Must be eligible to obtain DOD Clearance
Duration: up to 12 months Contract with possible extensions
Location: Remote work (Work from home)
Work Schedule: 4/10 First Shift, Monday to Thursday 10 hours per day.
Pay Rate: $100/hr on W2 [the pay rate may differ depending on your skills, education, experience, and other qualifications]
Featured Benefits:
· Medical Insurance in compliance with the ACA
· 401(k)
· Sick leave in compliance with applicable state, federal, and local laws
Required Skills:
SAP GRCCCM Expertise
• Indepth knowledge of SAP GRCContinuous Control Monitoring (CCM) architecture and data model
• Ability to design, configure, and maintain CCM rules, data sources, and monitoring plans
Engineering Methodology
• Experience with standard engineering process
• Background in doing requirements discovery and translation from business requirements to technical requirements / deliverable
• Experience with software systems design
Data Integration & Extraction
• Connecting CCM to SAP source systems (SAP ECC, S/4HANA, BW, CRM, MDG, GTS, Solution Manager/Focused Build, Ariba, SuccessFactors) via RFC, OData, or SAP Extraction Framework
• Experience with nonSAP data sources (SQL Server, Oracle, flat files) using SAP Data Services or SAP Cloud Platform Integration
Rule Development & Testing
• Building businessrule logic using SAP Business Rules Framework (BRFplus) and CCM rule editor
• Conducting unit and integrationtesting, handling rule versioning and changemanagement
Alert Management & Workflow
• Configuring alert thresholds, escalation paths, and automatic remediation workflows
• Integration with SAP GRC Access Control, Process Control, and external ticketing systems (ServiceNow, Remedy)
Reporting & Analytics
• Designing dashboards and KPI visualizations in SAP Analytics Cloud, SAP Lumira, or PowerBI for CCM results
• Generating periodic compliance and auditready reports
Compliance & Regulatory Knowledge
• Understanding of SOX, GDPR, ISO27001, NIST, and industryspecific controls that benefit from continuous monitoring
• Mapping CCM controls to Sensitive Access Risks and audit frameworks
SAP Basis & Landscape Understanding
• Familiarity with SAP system landscapes, transport management (CTS), and performance considerations for highvolume data extraction
• Coordination with Basis for system sizing, scheduling, and security authorizations (PFCG roles)
Scripting & Automation
• Basic ABAP/ABAPObjects for custom data extraction or enhancement
• Use of PowerShell, Python, or Bash scripts to automate data loads, rule deployments, and report distribution
ProblemSolving & Incident Response
• Monitoring CCM job logs, diagnosing data latency or rule failures, and implementing corrective actions
• Collaboration with IT security and audit teams for rapid remediation of control violations
Project & Change Management
• Leading CCM implementation or upgrade projects (Agile or Waterfall)
• Managing change requests, documentation, and stakeholder communication
Communication & Training
• Producing clear documentation of CCM configurations, control mappings, and operating procedures
• Training business owners, auditors, and endusers on CCM functionality and interpretation of alerts
