PG
SAP Security Specialist
PlanIT Group
šŗšø United States
Remote
2 months ago
- SAP
- SAP ERP
- SOX
- GDPR
- HIPAA
- ERP
- Change Management
- CCPA
- ITAR
2 months ago
SAP / ERP Risk & Controls
ā¢ Riskāassessment and design of SAP controls (access management, SoD, privileged access, configuration)
ā¢ Collaborate with functional & technical teams to identify, remediate, and monitor risks in FI, MM, SD, HR (and integrated modules)
ā¢ Implement and continuously improve automated & manual controls across SAP and connected systems
ā¢ Drive sustainable SAPāaudit remediation (vs. pointāinātime fixes)
IT General Controls (ITGC) & Application Testing
ā¢ Plan, execute, and document ITGC testing (access, change, operations) and applicationācontrol testing across the enterprise
ā¢ Maintain testing scripts, evidence collection, and testāresult signāoffs
ā¢ Ensure testing aligns with SOX, GDPR, HIPAA, and other regulatory expectations
Engineering Methodology
ā¢ Experience with standard engineering process
ā¢ Background in doing requirements discovery and translation from business requirements to technical requirements / deliverable
ā¢ Experience with software systems design
Audit & Remediation Management
ā¢ Assist the Team with Internal Audit and external auditors (Big 4) during walkthroughs, testing, and issue resolution
ā¢ Translate audit findings into clear, riskābased remediation plans with defined owners, timelines, and success criteria
ā¢ Track remediation progress and verify effectiveness of fixes
ERP Risk Governance & Oversight
ā¢ Maintain an upātoādate ERP risk register linked to enterprise risk appetite; quantify exposure and prioritize treatment
ā¢ Design and enforce a standardized ERP control framework (design, documentation, testing methodology)
ā¢ Provide oversight, challenge, and assurance on control design and operating effectiveness
Policy, Standards & Framework Development
ā¢ Develop, maintain, and enforce ERPāspecific policies, standards, and control frameworks
ā¢ Align policies with corporate GRC frameworks (nd regulatory requirements
ā¢ Conduct periodic policy reviews and updates
Stakeholder Communication & Influence
ā¢ Prepare and present riskāposture, controlāeffectiveness, and remediation status to senior leadership and business owners
ā¢ Translate technical risk concepts into businessāimpact language to influence decisionāmaking
ā¢ Build strong relationships with IT, finance, and lineāofābusiness partners
Technical SAP & Security Expertise
ā¢ SAP GRC (Access Control, SoD, ARA) configuration and maintenance
ā¢ SAP security administration (role design, provisioning, privilegedāaccess management)
ā¢ Understanding of SAP ERP application controls, integration points, and data flows
ITGC Technical Knowledge
ā¢ Access control, changeāmanagement, and operations control design and testing
ā¢ Knowledge of SAP Basis impact on security (client administration, transports, patches)
Audit & Assurance Experience
ā¢ Endātoāend audit engagement management (planning, fieldwork, reporting)
ā¢ Development of audit workpapers, evidence gathering, and auditāfinding remediation programs
ā¢ Interaction with regulators and external auditors on compliance matters
Regulatory & Compliance Acumen
ā¢ Deep knowledge of SOX Section 404, GDPR, CCPA, ITAR, and industryāspecific compliance frameworks
ā¢ Ability to map controls to regulatory requirements and produce compliance evidence
Consulting / Bigā4 Experience
ā¢ Advisory mindset with ability to assess client environments, propose riskābased solutions, and drive change
ā¢ Experience delivering projects in matrixed, fastāpaced environments
Communication & Presentation Skills
ā¢ Write clear policies, procedures, and risk documentation
ā¢ Deliver concise executive briefings, dashboards, and risk scorecards
ā¢ Facilitate workshops and training sessions for technical and nonātechnical audiences
SAP Security Specialist Ā· PlanIT Group