ZipRecruiter

Log In

1

Sap Grc Security Jobs (NOW HIRING)

next page

Showing results 1-20

People also search for

All JobsSap Grc Security Jobs

SAP GRC Security information

See salary details

$48

$69

$81

How much do sap grc security jobs pay per hour?

As of May 29, 2026, the average hourly pay for sap grc security in the United States is $69.97, according to ZipRecruiter salary data. Most workers in this role earn between $67.31 and $76.92 per hour, depending on experience, location, and employer.

What Is a SAP GRC Security Job?

SAP GRC refers to solutions which enable organizations to manage regulations and compliance as well as remove any risk in the management of the organization’s operations. GRC stands for governance, risk, and compliance. A job in SAP GRC security may include a role as a specialist or administrator, and your duties and responsibilities are likely dependent on your experience. Some duties in SAP GRC security may include developing a centralized process for security role administration, helping design roles for business and basis users, working with internal audit resources, and ensuring compliance to security policies and control sets.

What are the key skills and qualifications needed to thrive as an SAP GRC Security professional, and why are they important?

To thrive as an SAP GRC Security professional, you need a solid understanding of SAP security concepts, risk management, and compliance frameworks, often supported by relevant SAP certifications and experience in audit or IT security roles. Familiarity with SAP GRC modules (such as Access Control and Process Control), SAP authorization concepts, and tools like SAP Solution Manager is critical. Strong analytical thinking, attention to detail, and effective communication are essential soft skills for identifying risks and collaborating with cross-functional teams. These competencies are vital to ensure robust system security, regulatory compliance, and the protection of sensitive business data.

What are some common challenges faced by SAP GRC Security professionals, and how can they be addressed?

SAP GRC Security professionals often encounter challenges such as keeping up with evolving compliance requirements, managing complex authorization concepts, and ensuring seamless integration across SAP modules. Balancing the need for robust security with user productivity can also be demanding. These challenges are best addressed through continuous learning, close collaboration with business and IT teams, and leveraging automated tools within the SAP GRC suite to streamline risk analysis and access management.

What is SAP GRC Security?

SAP GRC Security refers to the processes and tools within SAP’s Governance, Risk, and Compliance (GRC) suite that help organizations manage and secure their SAP environments. It focuses on ensuring that users have appropriate access and that sensitive data is protected from unauthorized use or breaches. SAP GRC Security covers areas like access control, risk analysis, compliance monitoring, and audit management. By implementing SAP GRC Security solutions, companies can automate user provisioning, detect access risks, and maintain regulatory compliance.

What is the difference between Sap Grc Security vs SAP GRC Analyst?

AspectSap Grc SecuritySAP GRC Analyst
CertificationsSAP GRC Security certifications, CISSP, CISASAP GRC certifications, CISSP, CISA
Work EnvironmentSecurity-focused, IT security teamsRisk management, compliance teams
Employer & IndustryOrganizations implementing SAP GRC Security modulesCompanies using SAP GRC for compliance & risk

Both roles often require similar certifications like SAP GRC and security-related credentials. Sap Grc Security specialists focus on safeguarding SAP environments, while SAP GRC Analysts handle risk and compliance analysis within SAP GRC frameworks. The roles are complementary but differ in focus: security versus compliance analysis.

More about SAP GRC Security jobs
What cities are hiring for Sap Grc Security jobs? Cities with the most Sap Grc Security job openings:
What are the most commonly searched types of Sap Grc Security jobs? The most popular types of Sap Grc Security jobs are:
Who are the top companies hiring for Sap Grc Security jobs? The top employers for Sap Grc Security jobs are:
What states have the most Sap Grc Security jobs? States with the most job openings for Sap Grc Security jobs include:
What job categories do people searching Sap Grc Security jobs look for? The top searched job categories for Sap Grc Security jobs are:
SAP GRC Security jobs near you
Infographic showing various Sap Grc Security job openings in the United States as of May 2026, with employment types broken down into 2% Full Time, 95% Part Time, 2% Temporary, and 1% Nights. Highlights an 100% Hybrid job distribution, with an average salary of $145,541 per year, or $70 per hour.
Cyber - SAP Security and GRC Access & Process Control Manager

Cyber - SAP Security and GRC Access & Process Control Manager

Deloitte

Detroit, MI

Other

Posted 29 days ago

Deloitte rating

8.1

Company rating: 8.1 out of 10

Based on 86 frontline employees who took The Breakroom Quiz

59th of 138 rated financial services

Job description

SAP Security and GRC Manager / Engineering Manager II

Our Deloitte Cyber team helps organizations address cybersecurity challenges across complex technology environments. Join the team to deliver solutions that help clients navigate evolving threats, strengthen resilience, and support secure business transformation. In this role, you will help organizations manage SAP security and governance, risk, and compliance requirements across implementation and transformation programs.

Recruiting for this role ends on 12/31/2026.

Work you'll do

As an Engineering Manager II on the Enterprise Security team, you will be responsible for supporting SAP security and GRC implementations, assessments, and transformation initiatives across client environments.

  • Lead SAP ECC and SAP S/4HANA security assessments, design, and implementation activities across complex business and technology environments
  • Design, build, test, and deploy end-user and IT support security roles across SAP platforms, including Fiori, Ariba, Integrated Business Planning, Business Technology Platform, and Business Data Cloud
  • Configure and implement SAP GRC Access Control capabilities, including Access Risk Analysis, Access Request Management, Emergency Access Management, and Business Role Management
  • Support SAP GRC Process Control design and configuration, including controls, risks, subprocesses, organizations, assignments, and continuous control monitoring capabilities
  • Manage project workstreams, client stakeholders, and delivery teams while providing recommendations on SAP security role design, segregation of duties, vulnerability findings, and regulatory control requirements

A successful candidate would possess these skills:

  • Ability to work independently and collaborate as part of a team
  • Effective written and verbal communication skills
  • Meticulous attention to detail and quality of work product
  • Ability to build and sustain professional relationships
  • Ability to lead projects or workstreams
  • Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment
  • Strong interpersonal skills and professional demeanor
  • Ability to meet deadlines
  • Ability to mentor and provide clear guidance to others

The team

Deloitte's Enterprise Security Offering helps clients embed security across digital transformation initiatives by securing core technology environments while enabling business change. The team supports work spanning security architecture, secure development and deployment, cyber cloud capabilities, application security, and security for emerging technologies and connected products.

Qualifications

Required:

  • Bachelor's degree
  • 8+ years of experience with SAP S/4HANA security and SAP Governance, Risk, and Compliance (GRC) Access Control
  • 8+ years of hands-on experience implementing security for SAP S/4HANA, Fiori, Ariba, Integrated Business Planning (IBP), Business Technology Platform (BTP), and Business Data Cloud (BDC), including requirement gathering, security design, and deployment
  • Demonstrated delivery of 3+ full-cycle SAP GRC Access Control implementation projects, SAP S/4HANA security implementations, and 2+ SAP GRC Process Control implementations
  • 5+ years of experience designing, configuring, and implementing SAP GRC Access Risk Analysis (ARA), Access Request Management (ARM), Emergency Access Management (EAM), and Business Role Management (BRM)
  • Ability to travel 50%, on average, based on the work you do and the clients and industries/sectors you serve.
  • Limited immigration sponsorship may be available.

Preferred:

  • Previous consulting experience
  • Professional certification such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or Certified Information Systems Auditor (CISA)
  • Experience with SAP identity and access governance
  • Experience with cloud security and cloud migrations
  • Experience with SAP business process controls and data protection tools such as NextLabs
  • Experience with vulnerability management tools such as Onapsis

The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $134,500 to $265,100.

You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance.

Qualifications:

SAP Security and GRC Manager / Engineering Manager II

Our Deloitte Cyber team helps organizations address cybersecurity challenges across complex technology environments. Join the team to deliver solutions that help clients navigate evolving threats, strengthen resilience, and support secure business transformation. In this role, you will help organizations manage SAP security and governance, risk, and compliance requirements across implementation and transformation programs.

Recruiting for this role ends on 12/31/2026.

Work you'll do

As an Engineering Manager II on the Enterprise Security team, you will be responsible for supporting SAP security and GRC implementations, assessments, and transformation initiatives across client environments.

  • Lead SAP ECC and SAP S/4HANA security assessments, design, and implementation activities across complex business and technology environments
  • Design, build, test, and deploy end-user and IT support security roles across SAP platforms, including Fiori, Ariba, Integrated Business Planning, Business Technology Platform, and Business Data Cloud
  • Configure and implement SAP GRC Access Control capabilities, including Access Risk Analysis, Access Request Management, Emergency Access Management, and Business Role Management
  • Support SAP GRC Process Control design and configuration, including controls, risks, subprocesses, organizations, assignments, and continuous control monitoring capabilities
  • Manage project workstreams, client stakeholders, and delivery teams while providing recommendations on SAP security role design, segregation of duties, vulnerability findings, and regulatory control requirements

A successful candidate would possess these skills:

  • Ability to work independently and collaborate as part of a team
  • Effective written and verbal communication skills
  • Meticulous attention to detail and quality of work product
  • Ability to build and sustain professional relationships
  • Ability to lead projects or workstreams
  • Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment
  • Strong interpersonal skills and professional demeanor
  • Ability to meet deadlines
  • Ability to mentor and provide clear guidance to others

The team

Deloitte's Enterprise Security Offering helps clients embed security across digital transformation initiatives by securing core technology environments while enabling business change. The team supports work spanning security architecture, secure development and deployment, cyber cloud capabilities, application security, and security for emerging technologies and connected products.

Qualifications

Required:

  • Bachelor's degree
  • 8+ years of experience with SAP S/4HANA security and SAP Governance, Risk, and Compliance (GRC) Access Control
  • 8+ years of hands-on experience implementing security for SAP S/4HANA, Fiori, Ariba, Integrated Business Planning (IBP), Business Technology Platform (BTP), and Business Data Cloud (BDC), including requirement gathering, security design, and deployment
  • Demonstrated delivery of 3+ full-cycle SAP GRC Access Control implementation projects, SAP S/4HANA security implementations, and 2+ SAP GRC Process Control implementations
  • 5+ years of experience designing, configuring, and implementing SAP GRC Access Risk Analysis (ARA), Access Request Management (ARM), Emergency Access Management (EAM), and Business Role Management (BRM)
  • Ability to travel 50%, on average, based on the work you do and the clients and industries/sectors you serve.
  • Limited immigration sponsorship may be available.

Preferred:

  • Previous consulting experience
  • Professional certification such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or Certified Information Systems Auditor (CISA)
  • Experience with SAP identity and access governance
  • Experience with cloud security and cloud migrations
  • Experience with SAP business process controls and data protection tools such as NextLabs
  • Experience with vulnerability management tools such as Onapsis

The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $134,500 to $265,100.

You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance.

Education:Bachelor's DegreeEmployment Type:

What Deloitte employees say

Pay

Benefits

Hours and flexibility

Workplace

Get the full story on Breakroom

Apply