> Markdown version of [/jobs/ext/2553879-sap-security-specialist-sap-grc-ccm-engineer-admin](https://www.wearedevelopers.com/jobs/ext/2553879-sap-security-specialist-sap-grc-ccm-engineer-admin). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# SAP Security Specialist / SAP GRC CCM Engineer / Admin

- **Company:** Sun Technologies
- **Location:** United States (Remote available)
- **Salary:** $208,000.0
- **Contract:** Temporary contract
- **Skills:** SAP Cloud, Advanced Business Application Programming (ABAP), Agile Methodology, Bash Shell, Cyber Security, System Configuration, Data as a Services, Data Integration, Data Mining, Python (Programming Language), Microsoft SQL Server, SAP ERP, Open Data Protocol, Oracle (Applications), Windows PowerShell, Power BI, SuccessFactors, Lumira, SAP (Applications), SAP NetWeaver Business Warehouse, SAP Project System, Software Systems, Systems Integration, Management of Software Versions, SAP S/4HANA, SAP Ariba, Cts+, Servicenow
- **Published:** August 31, 2026
- **Apply:** https://www.dice.com/job-detail/6232301d-0877-4439-9106-1cebb86d8cd0

## About the Role

SAP GRCCCM Expertise

 * Indepth knowledge of SAP GRCContinuous Control Monitoring (CCM) architecture and data model
 * Ability to design, configure, and maintain CCM rules, data sources, and monitoring plans

Engineering Methodology

 * Experience with standard engineering process
 * Background in doing requirements discovery and translation from business requirements to technical requirements / deliverable
 * Experience with software systems design

Data Integration & Extraction

 * Connecting CCM to SAP source systems (SAP ECC, S/4HANA, BW, CRM, MDG, GTS, Solution Manager/Focused Build, Ariba, SuccessFactors) via RFC, OData, or SAP Extraction Framework
 * Experience with nonSAP data sources (SQL Server, Oracle, flat files) using SAP Data Services or SAP Cloud Platform Integration

Rule Development & Testing

 * Building businessrule logic using SAP Business Rules Framework (BRFplus) and CCM rule editor
 * Conducting unit and integrationtesting, handling rule versioning and changemanagement

## Description

* Configuring alert thresholds, escalation paths, and automatic remediation workflows
 * Integration with SAP GRC Access Control, Process Control, and external ticketing systems (ServiceNow, Remedy)

Reporting & Analytics

 * Designing dashboards and KPI visualizations in SAP Analytics Cloud, SAP Lumira, or PowerBI for CCM results
 * Generating periodic compliance and auditready reports

Compliance & Regulatory Knowledge

 * Understanding of SOX, GDPR, ISO27001, NIST, and industryspecific controls that benefit from continuous monitoring
 * Mapping CCM controls to Sensitive Access Risks and audit frameworks

SAP Basis & Landscape Understanding

 * Familiarity with SAP system landscapes, transport management (CTS), and performance considerations for highvolume data extraction
 * Coordination with Basis for system sizing, scheduling, and security authorizations (PFCG roles)

Scripting & Automation

 * Basic ABAP/ABAPObjects for custom data extraction or enhancement
 * Use of PowerShell, Python, or Bash scripts to automate data loads, rule deployments, and report distribution

ProblemSolving & Incident Response

 * Monitoring CCM job logs, diagnosing data latency or rule failures, and implementing corrective actions
 * Collaboration with IT security and audit teams for rapid remediation of control violations

Project & Change Management

 * Leading CCM implementation or upgrade projects (Agile or Waterfall)
 * Managing change requests, documentation, and stakeholder communication

Communication & Training

 * Producing clear documentation of CCM configurations, control mappings, and operating procedures
 * Training business owners, auditors, and endusers on CCM functionality and interpretation of alerts


## Related Videos

- [Headless by Design: Building Enterprise Systems That Agents Can Actually Use](https://www.wearedevelopers.com/videos/100092-headless-by-design-building-enterprise-systems-that-agents-can-actually-use)
- [Replacing Excel with SAP APIs & Python validation](https://www.wearedevelopers.com/videos/1944-replacing-excel-with-sap-apis-python-validation)
- [Remote Driving on Plant Grounds with State-of-the-Art Cloud Technologies](https://www.wearedevelopers.com/videos/251-remote-driving-on-plant-grounds-with-state-of-the-art-cloud-technologies)
- [From Global Capability Centers to AI-Powered Command Centers](https://www.wearedevelopers.com/videos/100096-from-global-capability-centers-to-ai-powered-command-centers)

## Related Articles

- [Everything a Developer Needs to Know About MCP with Neo4j](https://www.wearedevelopers.com/magazine/604-everything-a-developer-needs-to-know-about-mcp-with-neo4j)
- [Best Coding Boot Camps in Germany](https://www.wearedevelopers.com/magazine/237-best-coding-boot-camps-in-germany)
- [A Guide to Green Tech and Green IT Careers](https://www.wearedevelopers.com/magazine/374-a-guide-to-green-tech-and-green-it-careers)
- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Résumé-Driven Development: How IT trends affect the job market for software developers](https://www.wearedevelopers.com/magazine/59-resume-driven-development-how-it-trends-affect-the-job-market-for-software-developers)