SAP Security Specialist EO

Overview

Client is seeking a SAP GRC Continuous Control Monitoring Engineer/Administrator to design, configure, integrate, and support SAP GRC CCM solutions. This role will develop monitoring rules and data sources, automate control testing, manage alerts and remediation workflows, and support compliance reporting across complex SAP environments.

Core Responsibilities

• Design, configure, and maintain SAP GRC CCM rules, data sources, monitoring plans, and control mappings.
• Translate business, security, compliance, and audit requirements into technical designs and deliverables.
• Connect CCM with SAP source systems using RFC, OData, SAP Extraction Framework, and related integration methods.
• Develop business-rule logic using BRFplus and the CCM rule editor.
• Perform unit testing, integration testing, rule versioning, deployment, and change management.
• Configure alert thresholds, escalation paths, notifications, and automated remediation workflows.
• Integrate CCM with SAP GRC Access Control, SAP GRC Process Control, ServiceNow, Remedy, and other workflow platforms.
• Design dashboards, KPI visualizations, and audit-ready compliance reports.
• Monitor CCM job logs, investigate data latency and rule failures, and implement corrective actions.
• Coordinate with SAP Basis teams on system sizing, scheduling, transports, performance, and PFCG security roles.
• Lead or support CCM implementations, upgrades, and continuous-improvement initiatives.
• Maintain technical documentation, operating procedures, control mappings, and configuration records.
• Train business owners, auditors, and end users on CCM functionality, alerts, and reporting.

Essential Qualifications, Skills, and Technologies

• In-depth knowledge of SAP GRC Continuous Control Monitoring architecture and data models.
• Hands-on experience designing and configuring CCM rules, data sources, and monitoring plans.
• Experience integrating CCM with SAP source systems such as ECC, S/4HANA, BW, CRM, MDG, GTS, Solution Manager, Focused Build, Ariba, or SuccessFactors.
• Experience with RFC, OData, or SAP Extraction Framework.
• Experience developing business-rule logic using BRFplus or the CCM rule editor.
• Experience with requirements discovery, technical requirements development, and software systems design.
• Experience performing unit testing, integration testing, rule versioning, and change management.
• Experience configuring alerts, escalation paths, and remediation workflows.
• Understanding of SAP landscapes, CTS transport management, system performance, and PFCG security authorizations.
• Ability to troubleshoot CCM jobs, data extraction issues, rule failures, and control violations.
• Knowledge of compliance and control frameworks such as SOX, GDPR, ISO 27001, or NIST.
• Ability to produce clear technical documentation and communicate complex CCM concepts to business and audit stakeholders.

Preferred Skills or Experience

• Integration with non-SAP data sources such as SQL Server, Oracle, or flat files.
• SAP Data Services or SAP Cloud Platform Integration experience.
• SAP Analytics Cloud, SAP Lumira, or Power BI reporting experience.
• Basic ABAP or ABAP Objects development experience.
• Automation experience using PowerShell, Python, or Bash.
• Experience integrating CCM with ServiceNow or Remedy.
• Experience leading SAP GRC CCM implementations or upgrades using Agile or Waterfall methodologies.
• Experience training business control owners, auditors, and end users.

Work Details

• Remote within the United States; all U.S. time zones considered.
• Full-time telework arrangement.
• 4/10-A work schedule