> Markdown version of [/jobs/ext/1405922-sap-grc-ccm-engineer](https://www.wearedevelopers.com/jobs/ext/1405922-sap-grc-ccm-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# SAP GRC CCM Engineer

- **Company:** Trispoke Managed Services View all jobs
- **Location:** Orlando, FL, United States
- **Salary:** $79,300.0 - $118,900.0
- **Contract:** Temporary to permanent
- **Skills:** SAP Cloud, Advanced Business Application Programming (ABAP), Agile Methodology, Unit Testing, Bash Shell, Cyber Security, System Configuration, Data as a Services, Data Integration, Data Mining, Python (Programming Language), Microsoft SQL Server, SAP ERP, Open Data Protocol, Oracle (Applications), Windows PowerShell, Power BI, SuccessFactors, Lumira, SAP (Applications), SAP NetWeaver Business Warehouse, SAP GRC, SAP Project System, Software Systems, Systems Integration, Management of Software Versions, SAP S/4HANA, SAP Ariba, Cts+, Servicenow
- **Published:** July 23, 2026
- **Apply:** https://www.careerjet.com/jobad/us431ac8220d2e03f15bb577a0afb0de82

## About the Role

In depth knowledge of SAP GRC Continuous Control Monitoring (CCM) architecture and data model
Ability to design, configure, and maintain CCM rules, data sources, and monitoring plans
Engineering Methodology
Experience with standard engineering process
Background in doing requirements discovery and translation from business requirements to technical requirements / deliverable
Experience with software systems design
Data Integration & Extraction
Connecting CCM to SAP source systems (SAP ECC, S/4HANA, BW, CRM, MDG, GTS, Solution Manager/Focused Build, Ariba, SuccessFactors) via RFC, OData, or SAP Extraction Framework
Experience with non SAP data sources (SQL Server, Oracle, flat files) using SAP Data Services or SAP Cloud Platform Integration
Rule Development & Testing
Building business rule logic using SAP Business Rules Framework (BRFplus) and CCM rule editor
Conducting unit and integration testing, handling rule versioning and change management
Alert Management & Workflow
Configuring alert thresholds, escalation paths, and automatic remediation workflows
Integration with SAP GRC Access Control, Process Control, and external ticketing systems (ServiceNow, Remedy)
Reporting & Analytics
Designing dashboards and KPI visualizations in SAP Analytics Cloud, SAP Lumira, or Power BI for CCM results
Generating periodic compliance and audit ready reports
Compliance & Regulatory Knowledge
Understanding of SOX, GDPR, ISO 27001, NIST, and industry specific controls that benefit from continuous monitoring
Mapping CCM controls to Sensitive Access Risks and audit frameworks
SAP Basis & Landscape Understanding
Familiarity with SAP system landscapes, transport management (CTS), and performance considerations for high volume data extraction
Coordination with Basis for system sizing, scheduling, and security authorizations (PFCG roles)
Scripting & Automation
Basic ABAP/ABAP Objects for custom data extraction or enhancement
Use of PowerShell, Python, or Bash scripts to automate data loads, rule deployments, and report distribution
Problem Solving & Incident Response
Monitoring CCM job logs, diagnosing data latency or rule failures, and implementing corrective actions
Collaboration with IT security and audit teams for rapid remediation of control violations
Project & Change Management
Leading CCM implementation or upgrade projects (Agile or Waterfall)
Managing change requests, documentation, and stakeholder communication
Communication & Training
Producing clear documentation of CCM configurations, control mappings, and operating procedures
Training business owners, auditors, and end users on CCM functionality and interpretation of alerts
Soft Skills
Strong analytical mindset and attention to detail
Ability to translate complex technical concepts into business focused language
Proactive attitude toward continuous improvement and staying current with GRC best practices



## Related Videos

- [Plan CI/CD on the Enterprise level!](https://www.wearedevelopers.com/videos/544-plan-ci-cd-on-the-enterprise-level)
- [From Global Capability Centers to AI-Powered Command Centers](https://www.wearedevelopers.com/videos/100096-from-global-capability-centers-to-ai-powered-command-centers)
- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)

## Related Articles

- [Everything a Developer Needs to Know About MCP with Neo4j](https://www.wearedevelopers.com/magazine/604-everything-a-developer-needs-to-know-about-mcp-with-neo4j)
- [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)
- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [A Guide to Green Tech and Green IT Careers](https://www.wearedevelopers.com/magazine/374-a-guide-to-green-tech-and-green-it-careers)
- [Résumé-Driven Development: How IT trends affect the job market for software developers](https://www.wearedevelopers.com/magazine/59-resume-driven-development-how-it-trends-affect-the-job-market-for-software-developers)