> Markdown version of [/jobs/ext/2638410-sap-grc-lead](https://www.wearedevelopers.com/jobs/ext/2638410-sap-grc-lead). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # SAP GRC Lead - **Company:** GAF LLC - **Location:** Parsippany-Troy Hills, NJ, United States - **Experience:** Expert - **Salary:** $140,000.0 - $192,500.0 - **Contract:** Permanent contract - **Skills:** SAP Cloud, Microsoft Access, Advanced Business Application Programming (ABAP), JIRA, User Authentication, Software as a Service, Cloud Computing Security, Cyber Security, Computer Literacy, Data Security, Software Debugging, Identity and Access Management, Internet Security, SAP APO, SAP (Applications), SAP GRC, SAP Project System, SAP Security, User Provisioning Software, IT General Controls (ITGC), SAPBasis, SAP S/4HANA, SAP Ariba, Servicenow - **Published:** August 4, 2026 - **Apply:** https://dejobs.org/x/x/6748460DB72D4395A2EF8B7345BF0DAF/job/ ## About the Role * Bachelor's Degree is required * 8+ years of SAP security and GRC experience, with at least 3 years in a lead or architect capacity * Deep hands-on expertise with SAP GRC Access Control (AC 12.x): ARM, ARA, EAM, BRM modules * Proven experience implementing and administering SAP IAG on BTP * Demonstrated experience governing the security model for at least two of the three key SaaS platforms: SAP Ariba, SAP Analytics Cloud, or SAP IBP * Strong understanding of SoD concepts, audit principles, and access control frameworks (SOX, ITGC) General Knowledge, Skills and Abilities * Proficient level: Strategic and Visionary Leadership: Strategic Thinking, innovation driving, Decision making * Proficient level: Change Management and Adaptability: Managing resistance, adaptability, resilience * Proficient level: People and Relationship Management: Emotional Quotient, Communication, collaboration * Proficient level: Technical and Business Acumen: Digital Literacy, Business/Finance Acumen, Process Design * Proficient level:: Personal Drive and Mindset: Growth mindset, action oriented, courage Technical Knowledge, Skills and Abilities * SAP authorization concepts: authorization objects, PFCG role design, structural profiles, and S/4HANA role design * SCIM API integration for automated provisioning across SaaS platforms * Working knowledge of SAP BTP XSUAA and role collections * GRC reporting: exposure to SAP GRC dashboards, custom ABAP reports, or BI-based access reporting Qualifications Preferred * SAP Certified Application Associate - SAP GRC Access Control or equivalent certification * Experience with SAP Identity Authentication Service (IAS) and Identity Provisioning Service (IPS) for automated lifecycle management * Experience integrating GRC workflows with ITSM platforms (ServiceNow, Jira) for automated access requests * Knowledge of S/4HANA CDS view-level access control and ABAP-level authorization debugging (SU53, ST01, SU24) * Flexibilty to travel: Travel may be extensive at times to accommodate program needs, including support for program activities, vendor meetings, and site visits as necessary. ## Description The SAP GRC Lead is a senior specialist responsible for governing identity, access, risk, and compliance across the organization's SAP landscape. This role owns the end-to-end GRC strategy covering SAP GRC Access Control, SAP Identity Access Governance (IAG) on BTP, and the security models for all SAP SaaS platforms - including SAP Ariba, SAP Analytics Cloud (SAC), and SAP Integrated Business Planning (IBP). The GRC Lead acts as the primary point of accountability for SoD risk mitigation, access provisioning governance, and audit readiness across on-premise and cloud-based SAP systems., * GRC Strategy & Governance* Define and maintain the enterprise GRC framework spanning SAP on-premise and cloud, aligned with internal audit, legal, and regulatory requirements* Own the SoD (Segregation of Duties) rule-set across all connected SAP systems; manage conflict detection, mitigation controls, and compensating control documentation* Lead periodic access review and certification campaigns; drive remediation to closure* Establish policies and procedures for privileged access, emergency access management (EAM / Firefighter), and periodic user access reviews * SAP GRC Access Control* Administer and configure SAP GRC AC modules: Access Request Management (ARM), Access Risk Analysis (ARA), Emergency Access Management (EAM), and Business Role Management (BRM)* Design and maintain the GRC connector landscape for S/4HANA, ECC, and connected SaaS systems* Manage workflow configuration, MSMP routing rules, and approval hierarchies within GRC AC* Perform ruleset reviews and fine-tune risk definitions to minimize false positives while maintaining SOX/audit coverage * SAP Identity Access Governance (IAG) on BTP* Own the SAP IAG deployment on BTP: tenant configuration, IAS integration, access analysis, and role assignment workflows* Manage BTP trust configuration between IAG and SaaS platform connectors* Coordinate with the BTP Integration Lead on XSUAA scoping, role collection design, and subaccount trust settings relevant to IAG * SaaS Platform Security Models* Govern the security model for SAP Ariba:* Procurement and sourcing role design, user provisioning, and SoD rules for Ariba Buying, Invoicing, and Contracts* Ariba Network realm administration and supplier access governance* Govern the security model for SAP Analytics Cloud (SAC):* Team and role model design; story, model, and data access permissions* Integration with CDS view security for governed data access* Govern the security model for SAP Integrated Business Planning (IBP):* Supply-chain planning user roles, keyfigure-level access, and planning area security* IBP-to-S/4HANA integration security and cross-system SoD alignment* Maintain consistent naming conventions, provisioning workflows, and access certification cycles across all three SaaS platforms * Stakeholder Engagement & Team Leadership* Partner with Business Process Owners, IT Security, and Internal Audit to align GRC priorities and risk appetite* Mentor GRC analysts and role administrators; build team capability on IAG, SaaS security models, and audit processes* Engage with SAP and third-party vendors on GRC product roadmap, patches, and best practices ## Related Videos - [Improving quality with Agentic AI with Rovo Dev and Xray](https://www.wearedevelopers.com/videos/2005-improving-quality-with-agentic-ai-with-rovo-dev-and-xray) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Collaboration Quantified: Lessons from Open Source Developer Networks](https://www.wearedevelopers.com/videos/1422-collaboration-quantified-lessons-from-open-source-developer-networks) - [AI Pair Programming with GitHub Copilot at SAP: Looking Back, Looking Forward!](https://www.wearedevelopers.com/videos/1546-ai-pair-programming-with-github-copilot-at-sap-looking-back-looking-forward) - [Replacing Excel with SAP APIs & Python validation](https://www.wearedevelopers.com/videos/1944-replacing-excel-with-sap-apis-python-validation) - [Integrate your Cognitive Assistant with 3rd-party DBs and software](https://www.wearedevelopers.com/videos/249-integrate-your-cognitive-assistant-with-3rd-party-dbs-and-software) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [What’s the Difference between a Junior, Mid, and Senior Developer?](https://www.wearedevelopers.com/magazine/238-what-s-the-difference-between-a-junior-mid-and-senior-developer) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Top HR Tech Conferences in 2024](https://www.wearedevelopers.com/magazine/303-top-hr-tech-conferences-in-2024) - [Best Companies to Work For in Berlin: Top 14 Companies in 2023 ](https://www.wearedevelopers.com/magazine/188-best-companies-to-work-for-in-berlin-top-14-companies-in-2023) - [Best Coding Boot Camps in Germany](https://www.wearedevelopers.com/magazine/237-best-coding-boot-camps-in-germany)