Note: The job is a remote job and is open to candidates in USA. Bright Vision Technologies is seeking a Senior SAP Security & GRC Engineer to design, implement, and operate security and access-control frameworks across complex SAP landscapes. The role focuses on SAP authorization and role design, GRC operations, segregation-of-duties analysis, audit support, and collaboration with audit, compliance, and business teams.
Responsibilities
- Design and maintain SAP authorization concepts and role structures aligned with business processes and least-privilege principles
- Build and maintain master, derived, composite, and business roles for S/4HANA, ECC, and Fiori applications
- Configure and operate SAP GRC Access Control (ARA, ARM, BRM, EAM), including ruleset management, mitigating controls, and emergency access management
- Perform segregation-of-duties analysis and remediation in collaboration with business process owners and internal audit
- Configure user provisioning workflows in SAP GRC ARM, including request types, approval paths, and integration with IDM/IAM platforms
- Operate SAP GRC Process Control for continuous controls monitoring and policy management
- Implement security for Fiori applications, including catalogs, groups, and front-end authorizations
- Configure and operate security for SAP BTP and cloud applications using XSUAA, IAS, and IPS
- Support SAP audits (SOX, GxP, PCI) and respond to audit findings with documented remediation plans
- Implement transport security, table logging, and audit logging in line with internal security policies
- Monitor and remediate SAP Security Notes in coordination with Basis and DBA teams
- Maintain comprehensive, current technical documentation — including architecture diagrams, design decisions, configuration references, runbooks, and operational procedures — so that the system remains supportable, auditable, and easy to onboard new engineers onto over time
- Mentor junior team members and support knowledge transfer across the security team
Skills
- U.S. Citizens, Green Card Holders, EAD Holders, and H-1B transfer candidates
- Bachelor's degree in Computer Science, Engineering, or a related technical discipline
- Ten or more years of SAP Security / GRC experience in enterprise landscapes
- Strong hands-on experience with SAP authorization concepts and role design
- Deep experience operating SAP GRC Access Control (ARA, ARM, BRM, EAM)
- Experience supporting SAP audits and remediation activities
- Hands-on experience securing Fiori, BTP, and cloud SAP applications
- Familiarity with SAP IDM or third-party IGA tooling
- Working knowledge of SAP Process Control
- Strong understanding of regulatory frameworks such as SOX, GxP, and PCI
- Excellent communication and documentation skills
Benefits
- 100% remote (U.S.)
- Tremendous career growth potential
Company Overview