SAP Security Senior Analyst (SAP GRC)

TL;DR

SAP Security Senior Analyst (SAP GRC): Leading the design, implementation, and support of SAP Security and GRC across On-Premise and cloud solutions with an accent on role design, access risk analysis, and compliance. Focus on ensuring least-privilege principles, managing Segregation of Duties (SoD), and driving SOX/audit compliance initiatives.

Location: Hybrid (Costa Rica). Must be able to travel to the Costa Rica GBS office at least 2 days per week

Company

hirify.global is a healthcare company pioneering innovations at the intersection of health, material, and data science to improve patient lives and support healthcare professionals.

What you will do

• Provide subject matter expertise in SAP Security and GRC for S/4HANA, GTS, BTP, IBP, and Ariba.
• Lead role design, remediation, and optimization based on least-privilege and SoD principles.
• Manage end-to-end SAP GRC activities, including Fire Fighter administration, workflow management, and access risk analysis.
• Drive SOX and internal/external audit initiatives through evidence preparation and control testing.
• Implement and enhance the full SAP GRC suite to meet design standards and regulatory obligations.
• Mentor junior analysts and provide technical guidance to build team capability.

Requirements

• Bachelor’s Degree or higher.
• 7+ years of hands-on experience in SAP Security, GRC Administration, and Cloud-based SAP Application Security.
• Minimum 7 years of experience in SAP GRC 10.x/12.x Access Control and S/4HANA Security implementations.
• 5+ years of experience creating HANA DB security roles and user setup.
• Must be legally authorized to work in Costa Rica without sponsorship.
• Ability to provide on-call support during weekends and holidays.

Nice to have

• SOX/GRC Control experience, including MSMP and BRF+ configuration.
• Experience in the Life Science (GxP) domain.
• Experience designing SoD rulesets in SAP GRC Access Control.
• Experience translating control framework requirements into authorization concepts.

Culture & Benefits

• Hybrid work model offering a balance between remote work and office presence.
• Commitment to equal opportunity and diversity in the workplace.
• Competitive pay and benefits based on regular industry benchmarking.
• Focus on employee well-being through various support programs.