SAP Security/GRC Expert - Access Control (Contract SME

• Perform post go-live cleanup of the SAP GRC Access Control environment
• Diagnose and remediate broken or misconfigured workflows, including cross-organizational approval flows
• Validate and remediate SoD issues surfaced during internal review; document mitigating controls where remediation is not feasible
• Review and refine role design, user provisioning and access request workflows
• Provide direct, hands-on knowledge transfer to the assigned internal resource across every workstream
• Document remediation activities, design decisions and residual risks for clean handoff
• Surface additional scope discovered during remediation for joint decisioning at the mid-engagement checkpoint

*US Citizenship required

• Ability to work core hours in US Eastern Time
• Senior-level practitioner: 10+ years of SAP Security experience with deep focus on GRC Access Control (10.x or 12.x)
• Hands-on expertise across the GRC AC modules: Access Request Management (ARM), Business Role Management (BRM), Emergency Access Management (EAM/Firefighter) and Access Risk Analysis (ARA)
• Demonstrated experience remediating SoD conflicts and defining mitigating controls
• Strong SAP role design background (single, composite, derived) and user provisioning
• Experience troubleshooting MSMP workflows and BRF+ rules
• Comfort operating in a post go-live stabilization context where scope surfaces iteratively
• Strong written documentation and knowledge-transfer skills; able to teach as much as they deliver
• Track record operating effectively in a fully remote engagement model
• Eastern time working hours strongly preferred, * Experience with SAP S/4HANA environments
• Experience as an embedded SME rather than a large-program contributor
• Familiarity with cross-entity or shared-services access scenarios

Success Criteria:

• Access Control environment cleaned up and documented
• Identified SoD issues remediated or formally mitigated
• Workflows functioning end to end
• Internal resource meaningfully upskilled and able to sustain the environment post-engagement

Invitation for Job Applicants to Self-Identify as a U.S. Veteran

• A “disabled veteran” is one of the following:
• a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or
• a person who was discharged or released from active duty because of a service-connected disability.
• A “recently separated veteran” means any veteran during the three-year period beginning on the date of such veteran’s discharge or release from active duty in the U.S. military, ground, naval, or air service.
• An “active duty wartime or campaign badge veteran” means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.
• An “Armed forces service medal veteran” means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.

M&S (which stands for Management and Solutions) was conceived in 2002 with the vision of creating highly effective teams of elite consultants to deliver strategic process and technology solutions to enterprise organizations across the US. Our commitment to delivery in complex environments and long-term customer success has merged process and technology into innovative solutions, established deep pockets of expertise, and enabled innovative transformation for evolving businesses.

We have intentionally cultivated steady growth focused on being approachable and helpful to our dearly valued clients and closely cared-for employees. M&S people simply “care hard”, and this reflects in our work products, our interactions, and our culture.