SAP GRC CCM Engineer / Admin

Job Description

This role is for a SAP GRC CCM Engineer / Admin. The following details required and desired skills for this role:

Required Skills

• SAP GRC CCM Expertise
• Indepth knowledge of SAP GRC Continuous Control Monitoring (CCM) architecture and data model
• Ability to design, configure, and maintain CCM rules, data sources, and monitoring plans
• Engineering Methodology Experience with standard engineering process
• Experience with software systems design
• Data Integration & Extraction Connecting CCM to SAP source systems (SAP ECC, S/4HANA, BW, CRM, MDG, GTS, Solution Manager/Focused Build, Ariba, SuccessFactors) via RFC, OData, or SAP Extraction Framework
• Experience with nonSAP data sources (SQL Server, Oracle, flat files) using SAP Data Services or SAP Cloud Platform Integration
• Rule Development & Testing Building businessrule logic using SAP Business Rules Framework (BRFplus) and CCM rule editor
• Conducting unit and integrationtesting, handling rule versioning and changemanagement
• Alert Management & Workflow Configuring alert thresholds, escalation paths, and automatic remediation workflows
• Integration with SAP GRC Access Control, Process Control, and external ticketing systems (ServiceNow, Remedy)
• Reporting & Analytics Designing dashboards and KPI visualizations in SAP Analytics Cloud, SAP Lumira, or Power BI for CCM results
• Generating periodic compliance and auditready reports
• Compliance & Regulatory Knowledge Understanding of SOX, GDPR, ISO 27001, NIST, and industryspecific controls that benefit from continuous monitoring
• Mapping CCM controls to Sensitive Access Risks and audit frameworks
• SAP Basis & Landscape Understanding Familiarity with SAP system landscapes, transport management (CTS), and performance considerations for highvolume data extraction
• Scripting & Automation Basic ABAP/ABAP Objects for custom data extraction or enhancement
• Use of PowerShell, Python, or Bash scripts to automate data loads, rule deployments, and report distribution
• ProblemSolving & Incident Response Monitoring CCM job logs, diagnosing data latency or rule failures, and implementing corrective actions
• Collaboration with IT security and audit teams for rapid remediation of control violations

Desired Skills

• Project & Change Management Leading CCM implementation or upgrade projects (Agile or Waterfall)
• Managing change requests, documentation, and stakeholder communication
• Communication & Training Producing clear documentation of CCM configurations, control mappings, and operating procedures
• Training business owners, auditors, and endusers on CCM functionality and interpretation of alerts
• Soft Skills Strong analytical mindset and attention to detail
• Ability to translate complex technical concepts into businessfocused language
• Proactive attitude toward continuous improvement and staying current with GRC best practices