SAP GRC Access Control & SAP S/4HANA Security Specialist

Tasks

• Configure and maintain SAP GRC Access Control 12.0 across S/4HANA environments
• Design and optimize SoD risk matrices and access-risk rules for S/4HANA business processes
• Configure Fiori catalogs, business roles, target mappings, and S/4HANA authorization concepts
• Design and maintain MSMP workflows, custom paths, stages, agents, and notifications
• Configure and maintain BRFplus decision rules and tables
• Manage Emergency Access Management (EAM) and Firefighter IDs (FFIDs)
• Configure Firefighter owners, controllers, roles, reason codes, and log-review processes
• Conduct Access Risk Analysis (ARA) and manage remediation/mitigating controls
• Plan and execute User Access Review (UAR) and SoD role recertification campaigns
• Configure and troubleshoot GRC connectors to S/4HANA and other target systems
• Support SOX, internal audit, compliance, and access-governance requirements
• Analyze Firefighter logs, access requests, approvals, and risk-remediation activities
• Collaborate with SAP Security, IAM, Internal Audit, Risk, and business teams

Requirements

• Strong hands-on experience with SAP GRC AC 12.0, including ARA, ARM, EAM, BRM, MSMP, and BRFplus, along with solid knowledge of S/4HANA and Fiori security.
• SAP GRC Access Control 12.0
• SAP S/4HANA Security
• ARA – Access Risk Analysis
• ARM – Access Request Management
• EAM – Emergency Access Management / Firefighter
• BRM – Business Role Management
• MSMP Workflow Configuration
• BRFplus
• SoD Risk Analysis & Remediation
• User Access Reviews (UAR)
• Fiori Security – Catalogs,

Schedule

• Duration: 12+ Months

Location

• Washington, DC