SAP Security and GRC Manager / Engineering Manager II Our Deloitte Cyber team helps organizations address cybersecurity challenges across complex technology environments. Join the team to deliver ...
SAP Security and GRC Manager / Engineering Manager II Our Deloitte Cyber team helps organizations address cybersecurity challenges across complex technology environments. Join the team to deliver ...
SAP Security and GRC Manager / Engineering Manager II Our Deloitte Cyber team helps organizations address cybersecurity challenges across complex technology environments. Join the team to deliver ...
SAP Security and GRC Manager / Engineering Manager II Our Deloitte Cyber team helps organizations address cybersecurity challenges across complex technology environments. Join the team to deliver ...
Manage GRC integrations with third-party tools and internal systems. * Administer user roles, access controls, and security within the GRC module. * Design and manage the lifecycle of policies ...
Manage GRC integrations with third-party tools and internal systems. * Administer user roles, access controls, and security within the GRC module. * Design and manage the lifecycle of policies ...
Manage GRC integrations with third-party tools and internal systems. * Administer user roles, access controls, and security within the GRC module. * Design and manage the lifecycle of policies ...
Manage GRC integrations with third-party tools and internal systems. * Administer user roles, access controls, and security within the GRC module. * Design and manage the lifecycle of policies ...
Manage GRC integrations with third-party tools and internal systems. * Administer user roles, access controls, and security within the GRC module. * Design and manage the lifecycle of policies ...
Manage GRC integrations with third-party tools and internal systems. * Administer user roles, access controls, and security within the GRC module. * Design and manage the lifecycle of policies ...
Manage GRC integrations with third-party tools and internal systems. * Administer user roles, access controls, and security within the GRC module. * Design and manage the lifecycle of policies ...
Manage GRC integrations with third-party tools and internal systems. * Administer user roles, access controls, and security within the GRC module. * Design and manage the lifecycle of policies ...
GRC Specialist Senior
Coral Gables, FL · On-site +1
$94K/yr
The GRC Specialist Senior is responsible for conducting security assessments, control testing, issues management, and the development of metrics and compliance reports in alignment with the Bank ...
GRC Specialist Senior
Coral Gables, FL · On-site +1
$94K/yr
The GRC Specialist Senior is responsible for conducting security assessments, control testing, issues management, and the development of metrics and compliance reports in alignment with the Bank ...
Sr. ServiceNow Developer -GRC/TPRM/IRM
Altamonte Springs, FL · On-site
$50.50 - $69.50/hr
... Management (IRM), Governance, Risk, and Compliance (GRC), and Third-Party Risk Management (TPRM ... This is a high-impact contract opportunity where you'll architect, enhance, and support ServiceNow ...
Sr. ServiceNow Developer -GRC/TPRM/IRM
Altamonte Springs, FL · On-site
$50.50 - $69.50/hr
... Management (IRM), Governance, Risk, and Compliance (GRC), and Third-Party Risk Management (TPRM ... This is a high-impact contract opportunity where you'll architect, enhance, and support ServiceNow ...
Cybersecurity, IT GRC Practice Lead
$105K - $142K/yr
Are a leader who is also an expert in Cybersecurity and IT GRC Compliance and wants to learn more about AI Governance and AI Risk Management and more--and you love leading teams and effortlessly ...
Quick apply
Cybersecurity, IT GRC Practice Lead
$105K - $142K/yr
Are a leader who is also an expert in Cybersecurity and IT GRC Compliance and wants to learn more about AI Governance and AI Risk Management and more--and you love leading teams and effortlessly ...
GRC Specialist Senior
Coral Gables, FL · On-site
Overview The GRC Specialist Senior is responsible for conducting security assessments, control testing, issues management, and the development of metrics and compliance reports in alignment with the ...
GRC Specialist Senior
Coral Gables, FL · On-site
Overview The GRC Specialist Senior is responsible for conducting security assessments, control testing, issues management, and the development of metrics and compliance reports in alignment with the ...
GRC/IRM ServiceNow Technology Implementation Solutions - Manager
Miami, FL · On-site
$99K - $232K/yr
Industry/Sector Not Applicable Specialism Functional & Industry Technologies Management Level Manager & Summary The Opportunity As a GRC/IRM ServiceNow Technology Implementation Solutions - Manager ...
GRC/IRM ServiceNow Technology Implementation Solutions - Manager
Miami, FL · On-site
$99K - $232K/yr
Industry/Sector Not Applicable Specialism Functional & Industry Technologies Management Level Manager & Summary The Opportunity As a GRC/IRM ServiceNow Technology Implementation Solutions - Manager ...
Experience with senior management and board metrics generation and communication is a plus ... NIST Cyber Security Framework, CIS, and GRC Platforms. -----Intercontinental Exchange, Inc. is an ...
Experience with senior management and board metrics generation and communication is a plus ... NIST Cyber Security Framework, CIS, and GRC Platforms. -----Intercontinental Exchange, Inc. is an ...
GRC/IRM ServiceNow Technology Implementation Solutions - Manager
Tampa, FL · On-site
$99K - $232K/yr
Industry/Sector Not Applicable Specialism Functional & Industry Technologies Management Level Manager & Summary The Opportunity As a GRC/IRM ServiceNow Technology Implementation Solutions - Manager ...
GRC/IRM ServiceNow Technology Implementation Solutions - Manager
Tampa, FL · On-site
$99K - $232K/yr
Industry/Sector Not Applicable Specialism Functional & Industry Technologies Management Level Manager & Summary The Opportunity As a GRC/IRM ServiceNow Technology Implementation Solutions - Manager ...
Experience with senior management and board metrics generation and communication is a plus ... NIST Cyber Security Framework, CIS, and GRC Platforms. - Intercontinental Exchange, Inc. is an ...
Experience with senior management and board metrics generation and communication is a plus ... NIST Cyber Security Framework, CIS, and GRC Platforms. - Intercontinental Exchange, Inc. is an ...
Experience with senior management and board metrics generation and communication is a plus ... NIST Cyber Security Framework, CIS, and GRC Platforms. ----- Intercontinental Exchange, Inc. is an ...
Experience with senior management and board metrics generation and communication is a plus ... NIST Cyber Security Framework, CIS, and GRC Platforms. ----- Intercontinental Exchange, Inc. is an ...
Sr. ServiceNow Developer - IRM/GRC/TPRM
Tampa, FL · On-site
$51 - $70.25/hr
Must Haves: Required Skills & Experience: * Sr Developer, 5+ years * TPRM, GRC, Vendor Management * Experience with Implementations * Exposure to AI technologies * Ability to guide decisions and ...
Quick apply
Sr. ServiceNow Developer - IRM/GRC/TPRM
Tampa, FL · On-site
$51 - $70.25/hr
Must Haves: Required Skills & Experience: * Sr Developer, 5+ years * TPRM, GRC, Vendor Management * Experience with Implementations * Exposure to AI technologies * Ability to guide decisions and ...
Cyber Security Technical GRC - VP
Tampa, FL · Hybrid
$104K - $141K/yr
... Compliance (GRC) team.Theposition requires adeep understanding of how cloud environments ... Drive risk management initiatives formulticloud environments; ensure alignment with enterprise ...
New
Cyber Security Technical GRC - VP
Tampa, FL · Hybrid
$104K - $141K/yr
... Compliance (GRC) team.Theposition requires adeep understanding of how cloud environments ... Drive risk management initiatives formulticloud environments; ensure alignment with enterprise ...
New
Senior IT GRC Auditor - Miami Florida
$89K - $118K/yr
About the Position Our client, an investment management firm focused on investments in mortgages and consumer credit is seeking Senior IT GRC Auditor(s) to join their internal audit team. The ideal ...
Quick apply
Senior IT GRC Auditor - Miami Florida
$89K - $118K/yr
About the Position Our client, an investment management firm focused on investments in mortgages and consumer credit is seeking Senior IT GRC Auditor(s) to join their internal audit team. The ideal ...
Austin, TX or Sunnyvale, CA (3x/ week onsite) Duration: 6 months GRC Tech PM 8+ years of Project Management experience in GRC(Govrenance , Risk Compliance) • Manufacturing (OT) Cybersecurity ...
Austin, TX or Sunnyvale, CA (3x/ week onsite) Duration: 6 months GRC Tech PM 8+ years of Project Management experience in GRC(Govrenance , Risk Compliance) • Manufacturing (OT) Cybersecurity ...
The Security Manager will lead, implement, and maintain our security, privacy, and certification ... GRC Tool Ownership * Implement, configure, and administer the company's GRC platform . * Map ...
The Security Manager will lead, implement, and maintain our security, privacy, and certification ... GRC Tool Ownership * Implement, configure, and administer the company's GRC platform . * Map ...
Grc Manager information
See Florida salary details
$22.7K - $34.7K
5% of jobs
$34.7K - $46.6K
6% of jobs
$46.6K - $58.5K
4% of jobs
$58.5K - $70.5K
4% of jobs
$80K is the 25th percentile. Wages below this are outliers.
$70.5K - $82.4K
6% of jobs
$82.4K - $94.4K
16% of jobs
The median wage is $100.8K / yr.
$94.4K - $106.3K
15% of jobs
$106.3K - $118.3K
14% of jobs
$125.5K is the 75th percentile. Wages above this are outliers.
$118.3K - $130.2K
7% of jobs
$130.2K - $142.2K
9% of jobs
$142.2K - $154.1K
13% of jobs
$22.7K
$101.4K
$154.1K
How much do grc manager jobs pay per year?
What does a GRC manager do?
A typical day for a GRC Manager involves coordinating risk assessments, reviewing regulatory compliance requirements, and working closely with departments such as IT, Legal, and Internal Audit to implement controls and mitigate risks. This role often includes developing or updating policies, conducting training sessions, and preparing reports for senior leadership or regulatory bodies. GRC Managers also keep an eye on emerging risks and compliance trends, ensuring that the organization proactively adapts its governance and risk strategies. Collaboration and regular communication with diverse teams make the work dynamic and engaging, as no two days are exactly the same.
What are the key skills and qualifications needed to thrive as a GRC manager?
To thrive as a GRC Manager, you need a deep understanding of governance, risk management, and compliance frameworks, often supported by a bachelor's degree in business, information security, or a related field. Experience with GRC platforms (such as RSA Archer, MetricStream, or ServiceNow), risk assessment tools, and certifications like CISA, CRISC, or CISSP are highly valued. Leadership, strong analytical skills, and effective communication are vital soft skills for influencing stakeholders and managing cross-functional teams. These abilities are essential to ensure regulatory adherence, mitigate organizational risks, and drive a culture of compliance throughout the company.
What is a GRC manager?
A GRC (Governance, Risk, and Compliance) Manager is responsible for developing and overseeing an organization's risk management, regulatory compliance, and corporate governance programs. They ensure that internal policies and external regulations are followed to mitigate risks and maintain legal and ethical standards. Their role includes implementing frameworks, conducting risk assessments, and collaborating with different departments to align business objectives with compliance requirements. GRC Managers also provide training and guidance to employees on regulatory changes and best practices.

Full-time
Re-posted 12 days ago
Deloitte rating
8.2
Based on 92 frontline employees who took The Breakroom Quiz
45th of 150 rated financial services
Job description
SAP Security and GRC Manager / Engineering Manager II
Our Deloitte Cyber team helps organizations address cybersecurity challenges across complex technology environments. Join the team to deliver solutions that help clients navigate evolving threats, strengthen resilience, and support secure business transformation. In this role, you will help organizations manage SAP security and governance, risk, and compliance requirements across implementation and transformation programs.
Recruiting for this role ends on 12/31/2026.
Work you'll do
As an Engineering Manager II on the Enterprise Security team, you will be responsible for supporting SAP security and GRC implementations, assessments, and transformation initiatives across client environments.
- Lead SAP ECC and SAP S/4HANA security assessments, design, and implementation activities across complex business and technology environments
- Design, build, test, and deploy end-user and IT support security roles across SAP platforms, including Fiori, Ariba, Integrated Business Planning, Business Technology Platform, and Business Data Cloud
- Configure and implement SAP GRC Access Control capabilities, including Access Risk Analysis, Access Request Management, Emergency Access Management, and Business Role Management
- Support SAP GRC Process Control design and configuration, including controls, risks, subprocesses, organizations, assignments, and continuous control monitoring capabilities
- Manage project workstreams, client stakeholders, and delivery teams while providing recommendations on SAP security role design, segregation of duties, vulnerability findings, and regulatory control requirements
A successful candidate would possess these skills:
- Ability to work independently and collaborate as part of a team
- Effective written and verbal communication skills
- Meticulous attention to detail and quality of work product
- Ability to build and sustain professional relationships
- Ability to lead projects or workstreams
- Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment
- Strong interpersonal skills and professional demeanor
- Ability to meet deadlines
- Ability to mentor and provide clear guidance to others
The team
Deloitte's Enterprise Security Offering helps clients embed security across digital transformation initiatives by securing core technology environments while enabling business change. The team supports work spanning security architecture, secure development and deployment, cyber cloud capabilities, application security, and security for emerging technologies and connected products.
Qualifications
Required:
- Bachelor's degree
- 8+ years of experience with SAP S/4HANA security and SAP Governance, Risk, and Compliance (GRC) Access Control
- 8+ years of hands-on experience implementing security for SAP S/4HANA, Fiori, Ariba, Integrated Business Planning (IBP), Business Technology Platform (BTP), and Business Data Cloud (BDC), including requirement gathering, security design, and deployment
- Demonstrated delivery of 3+ full-cycle SAP GRC Access Control implementation projects, SAP S/4HANA security implementations, and 2+ SAP GRC Process Control implementations
- 5+ years of experience designing, configuring, and implementing SAP GRC Access Risk Analysis (ARA), Access Request Management (ARM), Emergency Access Management (EAM), and Business Role Management (BRM)
- Ability to travel 50%, on average, based on the work you do and the clients and industries/sectors you serve.
- Limited immigration sponsorship may be available.
Preferred:
- Previous consulting experience
- Professional certification such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or Certified Information Systems Auditor (CISA)
- Experience with SAP identity and access governance
- Experience with cloud security and cloud migrations
- Experience with SAP business process controls and data protection tools such as NextLabs
- Experience with vulnerability management tools such as Onapsis
The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $134,500 to $265,100.
You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance.
Qualifications:SAP Security and GRC Manager / Engineering Manager II
Our Deloitte Cyber team helps organizations address cybersecurity challenges across complex technology environments. Join the team to deliver solutions that help clients navigate evolving threats, strengthen resilience, and support secure business transformation. In this role, you will help organizations manage SAP security and governance, risk, and compliance requirements across implementation and transformation programs.
Recruiting for this role ends on 12/31/2026.
Work you'll do
As an Engineering Manager II on the Enterprise Security team, you will be responsible for supporting SAP security and GRC implementations, assessments, and transformation initiatives across client environments.
- Lead SAP ECC and SAP S/4HANA security assessments, design, and implementation activities across complex business and technology environments
- Design, build, test, and deploy end-user and IT support security roles across SAP platforms, including Fiori, Ariba, Integrated Business Planning, Business Technology Platform, and Business Data Cloud
- Configure and implement SAP GRC Access Control capabilities, including Access Risk Analysis, Access Request Management, Emergency Access Management, and Business Role Management
- Support SAP GRC Process Control design and configuration, including controls, risks, subprocesses, organizations, assignments, and continuous control monitoring capabilities
- Manage project workstreams, client stakeholders, and delivery teams while providing recommendations on SAP security role design, segregation of duties, vulnerability findings, and regulatory control requirements
A successful candidate would possess these skills:
- Ability to work independently and collaborate as part of a team
- Effective written and verbal communication skills
- Meticulous attention to detail and quality of work product
- Ability to build and sustain professional relationships
- Ability to lead projects or workstreams
- Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment
- Strong interpersonal skills and professional demeanor
- Ability to meet deadlines
- Ability to mentor and provide clear guidance to others
The team
Deloitte's Enterprise Security Offering helps clients embed security across digital transformation initiatives by securing core technology environments while enabling business change. The team supports work spanning security architecture, secure development and deployment, cyber cloud capabilities, application security, and security for emerging technologies and connected products.
Qualifications
Required:
- Bachelor's degree
- 8+ years of experience with SAP S/4HANA security and SAP Governance, Risk, and Compliance (GRC) Access Control
- 8+ years of hands-on experience implementing security for SAP S/4HANA, Fiori, Ariba, Integrated Business Planning (IBP), Business Technology Platform (BTP), and Business Data Cloud (BDC), including requirement gathering, security design, and deployment
- Demonstrated delivery of 3+ full-cycle SAP GRC Access Control implementation projects, SAP S/4HANA security implementations, and 2+ SAP GRC Process Control implementations
- 5+ years of experience designing, configuring, and implementing SAP GRC Access Risk Analysis (ARA), Access Request Management (ARM), Emergency Access Management (EAM), and Business Role Management (BRM)
- Ability to travel 50%, on average, based on the work you do and the clients and industries/sectors you serve.
- Limited immigration sponsorship may be available.
Preferred:
- Previous consulting experience
- Professional certification such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or Certified Information Systems Auditor (CISA)
- Experience with SAP identity and access governance
- Experience with cloud security and cloud migrations
- Experience with SAP business process controls and data protection tools such as NextLabs
- Experience with vulnerability management tools such as Onapsis
The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $134,500 to $265,100.
You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance.
Education:Bachelor's DegreeEmployment Type: