SAP Security/GRC Expert – Access Control

🔥 15 hours ago

🗽 New York – Remote

🗽 New York – Remote

⏳ Contract/Temporary

🟠 Senior

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

M&S Consulting

WebsiteLinkedInAll Job Openings

51 - 200 employees

💼 Consulting

🏥 Healthcare

📣 Marketing

Consulting • Healthcare • Marketing

M&S Consulting is a company that has been delivering technical and digital solutions for complex business problems since 2002. The company specializes in digital strategy and transformation for critical business functions and caters to both commercial and public sector clients. With a team of over 250 consultants, M&S Consulting integrates processes and technology across various industries, providing services in enterprise applications, cloud & infrastructure, emerging technology & AI, data analytics, cybersecurity, and agile project management. They offer a full range of services including advisory, implementation, managed services, and continuous improvement with a strong focus on delivering AI-driven solutions. M&S Consulting is known for executing projects with a service-minded and agile mentality, ensuring work is done right, on time, and within budget.

📋 Description

• Perform post go-live cleanup of the SAP GRC Access Control environment • Diagnose and remediate broken or misconfigured workflows, including cross-organizational approval flows • Validate and remediate SoD issues surfaced during internal review; document mitigating controls where remediation is not feasible • Review and refine role design, user provisioning and access request workflows • Provide direct, hands-on knowledge transfer to the assigned internal resource across every workstream • Document remediation activities, design decisions and residual risks for clean handoff • Surface additional scope discovered during remediation for joint decisioning at the mid-engagement checkpoint

🎯 Requirements

• US Citizenship required • Ability to work core hours in US Eastern Time • Senior-level practitioner: 10+ years of SAP Security experience with deep focus on GRC Access Control (10.x or 12.x) • Hands-on expertise across the GRC AC modules: Access Request Management (ARM), Business Role Management (BRM), Emergency Access Management (EAM/Firefighter) and Access Risk Analysis (ARA) • Demonstrated experience remediating SoD conflicts and defining mitigating controls • Strong SAP role design background (single, composite, derived) and user provisioning • Experience troubleshooting MSMP workflows and BRF+ rules • Comfort operating in a post go-live stabilization context where scope surfaces iteratively • Strong written documentation and knowledge-transfer skills; able to teach as much as they deliver

🏖️ Benefits

• Health insurance • 401(k) matching • Flexible work hours • Professional development opportunities