> Markdown version of [/jobs/ext/4226709-senior-sap-grc-security-specialist](https://www.wearedevelopers.com/jobs/ext/4226709-senior-sap-grc-security-specialist). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior SAP GRC Security Specialist - **Company:** RM SOLUTIONS, INC. - **Location:** Fort Washington, PA, United States - **Experience:** Expert - **Salary:** $197,600 - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Agile Methodology, Amazon Web Services, Authentication Protocols, Microsoft Azure, Border Gateway Protocol, Cisco PIX, Cloud Computing Security, Linux, Enhanced Interior Gateway Routing Protocol, Federal Information Processing Standards (FIPS), Identity and Access Management, Intrusion Detection Systems, Virtual Private Networks (VPN), Network Security, Lightweight Directory Access Protocols (LDAP), Network Architecture, Networking Basics, Routing, Nmap, Open Shortest Path First (OSPF), PCI Data Security Standards, Public Key Infrastructure, Role-Based Access Control, Security Assertion Markup Language (SAML), SAP (Applications), SAP GRC, Security Software, Security Information and Event Management, Single Sign-On, Systems Architecture, TCP/IP, VMware Virtualization, VMware VSphere, Wide Area Networks, EndPointSecurity, Load Balancing, Cloud Platform System, Cyber Threat Analysis, Network Support, Firewall Services Module, Splunk, New Relic (SaaS), Vulnerability Analysis - **Published:** October 12, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=c89742bc26f06102 ## About the Role * Extensive experience with SAP GRC modules including Access Control, Process Control, and Risk Management. * Strong understanding of computer networking concepts such as TCP/IP, routing protocols (OSPF/EIGRP/BGP), network architecture design, LAN/WAN infrastructure, and network support. * Proficiency in cybersecurity tools including SIEM platforms (Splunk), vulnerability assessment tools (Nmap), IDS/IPS systems, endpoint detection & response (EDR), and threat intelligence platforms. * Knowledge of IT infrastructure components like SAN storage systems, VMware virtualization environments (vSphere), cloud computing platforms (AWS/Azure), load balancing solutions, and system administration across Windows/Linux/macOS operating systems. * Familiarity with encryption technologies such as PKI certificates, FIPS standards for cryptography, SSL/TLS protocols for secure communications. * Experience implementing security frameworks aligned with ISO 27000 series standards; understanding of risk management frameworks like RMF or DIACAP. * Ability to perform comprehensive vulnerability assessments and security risk investigations while adhering to ITIL or Agile development methodologies for continuous improvement. ## Description * Lead the development and deployment of SAP GRC solutions to automate access controls, risk management, and compliance monitoring. * Conduct comprehensive security risk assessments, vulnerability analyses, and security audits within SAP landscapes to identify potential threats and weaknesses. * Collaborate with cross-functional teams to design secure system architectures that incorporate network security principles such as LAN/WAN segmentation, firewall configurations (Cisco ASA), VPN setup, and intrusion detection systems (IDS). * Manage security incident response activities by analyzing security events using SIEM tools like Splunk or New Relic, investigating breaches, and coordinating incident recovery efforts. * Ensure adherence to industry standards such as ISO 27001/27002, NIST frameworks, PCI DSS, FedRAMP, and FISMA by developing system security plans and implementing necessary controls. * Oversee identity and access management (IAM) processes including authentication protocols (SAML, LDAP), role-based access control (RBAC), and Single Sign-On (SSO) integrations. * Maintain up-to-date knowledge of cybersecurity trends like threat detection & response techniques, vulnerability research, cloud security engineering (AWS, Azure), and system hardening practices.