SAP Security & GRC Engineer

Bright Vision Technologies is a technology consulting and software development company delivering cloud, AI, data, and enterprise solutions across the United States. The company is seeking an experienced SAP Security & GRC Engineer to design, implement, and operate security and access-control frameworks for complex SAP landscapes. The role focuses on SAP role design, user provisioning, segregation-of-duties analysis, audit support, and operation of SAP GRC suites while partnering with audit, compliance, and business teams.

Responsibilities:

• Design, implement, and operate security and access-control frameworks for complex SAP landscapes, including S/4HANA, ECC, BW/4HANA, Fiori, BTP, and SuccessFactors
• SAP role design, user provisioning, segregation-of-duties analysis, audit support, and the technical operation of SAP GRC suites
• Partner closely with audit, compliance, and business teams to deliver a secure, auditable SAP environment

Requirements:

• Bachelor's degree in Computer Science, Engineering, or a related technical discipline
• Five or more years of SAP Security / GRC experience in enterprise landscapes
• Strong hands-on experience with SAP authorization concepts and role design
• Deep experience operating SAP GRC Access Control (ARA, ARM, BRM, EAM)
• Experience supporting SAP audits and remediation activities
• Hands-on experience securing Fiori, BTP, and cloud SAP applications
• Familiarity with SAP IDM or third-party IGA tooling
• Working knowledge of SAP Process Control
• Strong understanding of regulatory frameworks such as SOX, GxP, and PCI
• Excellent communication and documentation skills
• U.S. Citizens, Green Card Holders, EAD Holders, and H-1B transfer candidates are encouraged to apply
• We are unable to sponsor new H-1B visa petitions for this position
• SAP-certified Security or GRC credentials
• Experience with SAP Cloud Identity services (IAS, IPS) and SCIM-based integrations
• Familiarity with HANA security and analytic privileges
• Experience with continuous controls monitoring frameworks
• Exposure to SAP RISE / Grow security operating models