Cybersecurity GRC Analyst – SAP Compliance & Access Controls

Were seeking a Cybersecurity GRC Analyst to support governance risk and compliance activities across our SAP this role youll help ensure compliance with internal policies regulatory requirements and industry standards by managing SAP GRC processes conducting risk assessments supporting audits and strengthening security controls.

You will work closely with cybersecurity SAP audit and business stakeholders to identify risks monitor compliance improve controls and support a secure and compliant SAP platform. This position is ideal for a compliance professional who enjoys solving complex security challenges driving process improvements and partnering across teams to reduce organizational risk.

• Manage and support SAP GRC processes including Access Control Process Control and Risk Management.
• Perform Segregation of Duties (SoD) analysis risk assessments and remediation activities.
• Conduct User Access Reviews (UARs) and Privileged Access Monitoring (PAM) to ensure appropriate access controls.
• Support IT General Controls (ITGC) testing SOX compliance activities and audit readiness initiatives.
• Identify control gaps recommend corrective actions and track remediation efforts through completion.
• Develop and maintain compliance documentation process procedures and control evidence.
• Partner with SAP cybersecurity internal audit and business teams to address security and compliance risks.
• Monitor compliance metrics and prepare reports for management and stakeholders.
• Support internal and external audits by gathering evidence responding to requests and facilitating walkthroughs.
• Recommend improvements to governance risk and compliance processes tools and controls to enhance efficiency and effectiveness.
• Contribute to cybersecurity and compliance initiatives that strengthen the organizations risk management framework.

• Degree in Information Security Cybersecurity Information Systems Business Risk Management Audit or a related field or equivalent combination of education and experience.
• Typically requires 4 years of relevant experience in cybersecurity compliance IT audit governance risk management SAP security or governance risk and compliance functions.
• Hands-on experience with SAP GRC Suite including Access Control Process Control and/or Risk Management.
• Experience performing Segregation of Duties (SoD) analysis and remediation.
• Experience conducting User Access Reviews and Privileged Access Monitoring activities.
• Experience supporting ITGC testing SOX compliance and audit activities.
• Experience identifying control gaps and supporting remediation efforts.
• Strong analytical and problem-solving skills with the ability to assess risk and recommend practical solutions.
• Experience creating and maintaining compliance documentation audit evidence and reports.

• SAP security administration experience.
• Experience supporting regulatory frameworks and compliance requirements in highly regulated industries.
• Knowledge of cybersecurity governance risk management and internal control frameworks.
• Experience with Integrated Risk Management (IRM) Governance Risk and Compliance (GRC) or Regulatory Technology (RegTech) platforms.
• Professional certifications such as CISA CRISC CISSP SAP GRC SAP Security or related credentials.
• Experience with SAP S/4HANA environments.
• Strong stakeholder management and communication skills with the ability to influence cross-functional teams.
• Experience creating compliance dashboards metrics and executive reporting.

• Minimal travel may be required based on business needs.
• Position may follow a hybrid or in-office work model based on location and business requirements.
• Ability to work at a computer and participate in virtual meetings for extended periods.