SAP Security Consultant

About the role

Bright Vision Technologies is a technology consulting and software development company delivering cloud, AI, data, and enterprise solutions across the United States. This is a fantastic opportunity to join an established and well-respected organization offering tremendous career growth potential.

Responsibilities

• Design and maintain SAP authorization concepts and role structures aligned with business processes and least-privilege principles
• Build and maintain master, derived, composite, and business roles for S/4HANA, ECC, and Fiori applications
• Configure and operate SAP GRC Access Control (ARA, ARM, BRM, EAM), including ruleset management, mitigating controls, and emergency access management
• Perform segregation-of-duties analysis and remediation in collaboration with business process owners and internal audit
• Configure user provisioning workflows in SAP GRC ARM, including request types, approval paths, and integration with IDM/IAM platforms
• Operate SAP GRC Process Control for continuous controls monitoring and policy management
• Implement security for Fiori applications, including catalogs, groups, and front-end authorizations
• Configure and operate security for SAP BTP and cloud applications using XSUAA, IAS, and IPSS
• Support SAP audits (SOX, GxP, PCI) and respond to audit findings with documented remediation plans
• Implement transport security, table logging, and audit logging in line with internal security policies
• Monitor and remediate SAP Security Notes in coordination with Basis and DBA teams
• Maintain comprehensive, current technical documentation — including architecture diagrams, design decisions, configuration references, runbooks, and operational procedures — so that the system remains supportable, auditable, and easy to onboard new engineers onto over time
• Mentor junior team members and support knowledge transfer across the security team

Requirements

• Bachelor’s degree in Computer Science, Engineering, or a related technical discipline
• Five or more years of SAP Security / GRC experience in enterprise landscapes
• Strong hands-on experience with SAP authorization concepts and role design
• Deep experience operating SAP GRC Access Control (ARA, ARM, BRM, EAM)
• Experience supporting SAP audits and remediation activities
• Familiarity with SAP IDM or third-party IGA tooling
• Working knowledge of SAP Process Control
• Strong understanding of regulatory frameworks such as SOX, GxP, and PCI
• Excellent communication and documentation skills

Qualifications

• Experience with SAP Cloud Identity services (IAS, IPS) and SCIM-based integrations
• Familiarity with HANA security and analytic privileges
• Experience with continuous controls monitoring frameworks
• Exposure to SAP RISE / Grow security operating models

Skills

Deep expertise in SAP authorization concepts, strong hands-on experience operating SAP GRC Access Control, and strong understanding of regulatory frameworks such as SOX, GxP, and PCI.

Benefits

N/A

Pay

$100,000–$150,000 Annually

Schedule

Full-time, Direct W2

Contact

To apply, please send your resume to hilda@bvteck.com. Learn more about Bright Vision Technologies at www.bvteck.com.

Bright Vision Technologies is an Equal Opportunity Employer.