Senior SAP GRC Security Specialist

• Lead the development and deployment of SAP GRC solutions to automate access controls, risk management, and compliance monitoring.
• Conduct comprehensive security risk assessments, vulnerability analyses, and security audits within SAP landscapes to identify potential threats and weaknesses.
• Collaborate with cross-functional teams to design secure system architectures that incorporate network security principles such as LAN/WAN segmentation, firewall configurations (Cisco ASA), VPN setup, and intrusion detection systems (IDS).
• Manage security incident response activities by analyzing security events using SIEM tools like Splunk or New Relic, investigating breaches, and coordinating incident recovery efforts.
• Ensure adherence to industry standards such as ISO 27001/27002, NIST frameworks, PCI DSS, FedRAMP, and FISMA by developing system security plans and implementing necessary controls.
• Oversee identity and access management (IAM) processes including authentication protocols (SAML, LDAP), role-based access control (RBAC), and Single Sign-On (SSO) integrations.
• Maintain up-to-date knowledge of cybersecurity trends like threat detection & response techniques, vulnerability research, cloud security engineering (AWS, Azure), and system hardening practices.

• Extensive experience with SAP GRC modules including Access Control, Process Control, and Risk Management.
• Strong understanding of computer networking concepts such as TCP/IP, routing protocols (OSPF/EIGRP/BGP), network architecture design, LAN/WAN infrastructure, and network support.
• Proficiency in cybersecurity tools including SIEM platforms (Splunk), vulnerability assessment tools (Nmap), IDS/IPS systems, endpoint detection & response (EDR), and threat intelligence platforms.
• Knowledge of IT infrastructure components like SAN storage systems, VMware virtualization environments (vSphere), cloud computing platforms (AWS/Azure), load balancing solutions, and system administration across Windows/Linux/macOS operating systems.
• Familiarity with encryption technologies such as PKI certificates, FIPS standards for cryptography, SSL/TLS protocols for secure communications.
• Experience implementing security frameworks aligned with ISO 27000 series standards; understanding of risk management frameworks like RMF or DIACAP.
• Ability to perform comprehensive vulnerability assessments and security risk investigations while adhering to ITIL or Agile development methodologies for continuous improvement.

Embark on a journey where your expertise in cybersecurity will shape the future of our enterprise’s digital safety! We’re committed to fostering an environment that values innovation, collaboration, and professional growth-empowering you to make a meaningful impact every day.

Pay: From $95.00 per hour