SAP Governance Risk and Compliance Senior Consultant

Location: Mechanicsburg, PA
Work Arrangement: 100% Remote - Mechanicsburg, PA
Schedule: 8 hours/day
Interview: Virtual
Contract: Sep 21, 2026 - Sep 18, 2027 (362 days)
Visas Accepted: USC, GC

Role Overview

The role is responsible for driving GRC Access Control activities on an S4HANA and BRIM project. This resource will replace another resource going on leave. There will be a period of KT before the resource goes on leave, after which the new resource will pick up around GRC unit testing in preparation for moving to the QA system. In scope for Journi GRC for S4 only are access risk analysis, emergency access management, and integration with Sailpoint to enable provisioning along with SOD analysis within GRC.

Primary Responsibilities

• Drive efforts around SOD analysis at the role and user level and coordinate with internal audit and functional counterparts to remediate or mitigate.
• Perform Segregation of Duties analysis, security risk assessments, and conflict remediation using GRC and compensating controls.
• Support security-related activities such as user access reviews, emergency access/firefighter management, audit support, and periodic recertification.
• Coordinate transport management, role testing, role troubleshooting, and work with functional, technical, and basis teams.
• Drive GRC Access Control activities on an S4HANA and BRIM project.
• Perform GRC unit testing in preparation for moving to the QA system.
• Execute end to end GRC testing including unit, integration, and UAT testing.
• Develop the cutover plan for SAP GRC and SOP documents for GRC.

Required Technical Skills

• Advanced experience with SAP - GRC - Governance Risk and Compliance.
• Intermediate hands-on experience with SAP GRC Access Control, including Access Request Management, Access Risk Analysis, role management, emergency access management, and mitigation controls.
• Basic experience with S/4HANA security, with proven ownership of role design, authorization concepts, user provisioning, and access remediation in a live enterprise environment.
• Basic experience driving efforts around SOD analysis at the role and user level and coordinating with internal audit and functional counterparts to remediate or mitigate.
• Basic experience performing Segregation of Duties analysis, security risk assessments, and conflict remediation using GRC and compensating controls.
• Basic experience supporting security-related activities such as user access reviews, emergency access/firefighter management, audit support, and periodic recertification.
• Basic familiarity with transport management, role testing, role troubleshooting, and coordination with functional, technical, and basis teams.
• Basic experience applying SAP security concepts such as org levels, authorization fields, role menus, SU24/SU53 analysis, and access trace resolution.
• Basic experience working in structured delivery environments with ticketing, change control, documentation, and stakeholder communication.
• Basic experience applying collaboration and problem-solving skills to support audits, ensure compliance, and drive timely resolution of security issues.
• Basic experience driving GRC Access Control activities on an S4HANA and BRIM project.
• Basic experience with GRC unit testing in preparation for moving to QA system.
• Basic experience with access risk analysis, emergency access management, and integration with Sailpoint to enable provisioning along with SOD analysis within GRC.
• Basic experience with GRC design for ARA (includes SOD/Sensitive access ruleset), ARM, EAM, and BRM.
• Basic experience executing test results for end to end GRC including unit, integration, and UAT testing.
• Basic experience developing a cutover plan for SAP GRC.
• Basic experience developing SOP documents for GRC.