> Markdown version of [/jobs/ext/3992823-sap-grc-consultant](https://www.wearedevelopers.com/jobs/ext/3992823-sap-grc-consultant). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# SAP GRC consultant

- **Company:** Collabera
- **Location:** Washington, DC, United States
- **Salary:** $145,600.0 - $156,000.0
- **Contract:** Permanent contract
- **Skills:** Audit Trail, Identity and Access Management, Intrusion Detection Systems, Azure Active Directory, Rule Engine, SAP (Applications), SAP GRC, SAP Security, Systems Integration, Okta, Sap Fiori, SAP S/4HANA, SailPoint
- **Published:** October 28, 2026
- **Apply:** https://www.dice.com/job-detail/fe5c74e2-114e-4ef7-a69e-481785eb6283

## About the Role

SAP S/4HANA Experience (Required): Proven hands-on experience configuring GRC Access Control specifically within an SAP S/4HANA ecosystem, including deep knowledge of S/4HANA security concepts, Fiori tile/launchpad security, and updating GRC rule sets for S/4 processes.
*
SAP GRC Access Control Expertise: Deep functional and technical hands-on experience in SAP GRC AC 12.0 covering ARA, ARM, EAM, and BRM modules.
*
MSMP & BRF+ Rule Engine: Strong proficiency in configuring MSMP workflows, defining custom stages, paths, notification templates, and maintaining BRFplus decision tables/rules.
*
EAM / FFID Governance: Solid experience setting up Firefighter IDs, controller assignments, notification alerts, and auditing EAM log reviews in S/4HANA.
*
Access Review Administration: Proven capability in running UAR campaigns, tracking completion, and enforcing access revocation/remediation.

Preferred / Nice-to-Have Skills
*
IAM Integration: Experience integrating GRC AC with enterprise Identity & Access Management systems (e.g., Azure AD, SailPoint, Okta).
*
Certification: SAP Certified Application Associate SAP Access Control / SAP Security.

Soft Skills
*
High attention to detail regarding security compliance, risk mitigation, and audit trails.
*
Strong communication skills to train Firefighter owners, controllers, and business approvers.
*
Collaborative mindset to work closely with IT, Internal Audit, and Risk Management teams.

## Description

We are seeking an experienced SAP GRC Access Control Specialist with SAP S/4HANA expertise to design, configure, and maintain our access governance, emergency access, and Segregation of Duties (SoD) framework. In this role, you will be responsible for end-to-end MSMP workflow design, Emergency Access Management (EAM), User Access Reviews (UAR), continuous risk analysis, and adapting GRC rules/workflows to support our S/4HANA and Fiori environment., S/4HANA Access Governance: Adapt and optimize GRC Access Control rules, SoD risk matrices, and workflows specifically for SAP S/4HANA, including Fiori catalogs, target mappings, business roles, and S/4-specific authorization objects.
*
Connector & Infrastructure Management: Setup, Maintain and troubleshoot GRC AC connectors to S/4HANA and other target systems.

SAP GRC Access Control Configuration & Operations
*
MSMP Workflow Setup: Design, configure, and maintain Multi-Stage Multi-Path (MSMP) workflows for Access Risk Management (ARM), custom path routing, agent definitions, notification templates, and BRFplus decision rules.
*
Emergency Access Management (EAM): Configure and manage Firefighter IDs (FFIDs), Firefighter roles, owners, controllers, reason codes, and automated EAM log review workflows across S/4HANA environments.
*
Access Reviews & Certifications: Plan, launch, and manage periodic User Access Reviews (UAR) and SoD Role Re-certifications, streamlining manager and process owner approval workflows.
*
Risk Analysis & Remediation (ARA): Configure Segregation of Duties (SoD) and Sensitive Access risk matrices for S/4HANA business processes, run risk analysis reports, and manage mitigating controls/assignments.
*
Audit & Compliance Support: Audit Firefighter usage, log reviews, and access request approvals to ensure strict compliance with SOX and internal audit standards.