SAP GRC Specialist

Location: 100% remote within the United States

Salary: $100,000–$150,000 annually

Company

hirify.global is a technology consulting and software development company delivering cloud, AI, data, and enterprise solutions across the United States.

What you will do

• Design and maintain SAP authorization concepts and role structures based on business processes and least-privilege principles.
• Build and maintain master, derived, composite, and business roles for S/4HANA, ECC, and Fiori applications.
• Configure and operate SAP GRC Access Control and Process Control, including rulesets, mitigating controls, emergency access, workflows, and continuous controls monitoring.
• Perform segregation-of-duties analysis and remediation with business process owners and internal audit.
• Secure Fiori applications, SAP BTP, and cloud applications using XSUAA, IAS, and IPS, while integrating with IDM/IAM platforms.
• Support SOX, GxP, and PCI audits, remediate SAP Security Notes, and maintain architecture diagrams, runbooks, configuration references, and operational documentation.

Requirements

• Must be located in the United States for this remote position.
• Must already be authorized to work in the United States; citizens, Green Card holders, EAD holders, and H-1B transfer candidates are encouraged to apply.
• New H-1B visa petitions cannot be sponsored for this position.
• Bachelor’s degree in Computer Science, Engineering, or a related technical discipline.
• At least five years of SAP Security/GRC experience, with strong SAP authorization and role-design expertise.
• Hands-on experience with SAP GRC Access Control, Fiori, BTP, SAP audits, IDM or IGA tooling, and SAP Process Control.

Nice to have

• SAP Security or GRC certification.
• Experience with IAS, IPS, SCIM integrations, HANA security, analytic privileges, and continuous controls monitoring.
• Exposure to SAP RISE or Grow security operating models.

Culture & Benefits

• Full-time direct W-2 employment.
• Opportunity for career growth within an established consulting and software development organization.
• Collaboration with audit, compliance, business, Basis, DBA, and security teams.
• Mentoring and knowledge-transfer responsibilities across the security team.