SAP GRC Security SME

Job Description:

DXC Technology (NYSE: DXC) helps global companies run their mission-critical systems and operations while modernizing IT, optimizing data architectures, and ensuring security and scalability across public, private, and hybrid clouds. The world’s largest companies and public sector organizations trust DXC to deploy services across the Enterprise Technology Stack to drive new performance levels, competitiveness, and customer experience. Learn more about how we deliver excellence for our customers and colleagues at DXC.com. 

Location: Remote with up to 50% travel to client location.  Candidates located within 25 miles of a DXC office will be required to work onsite 2–3 times per week.

Job Summary:  We are seeking an experienced SAP GRC Security Subject Matter Expert (SME) to lead and support the design, implementation, and governance of SAP security and compliance solutions. The ideal candidate will have deep expertise in SAP GRC Access Control, SAP Security architecture, and risk management practices, ensuring secure and compliant SAP environments across the enterprise.

Key Responsibilities:

• Serve as the SME for SAP GRC Access Control (AC), Process Control (PC), and Risk Management (RM) modules.
• Design and implement SAP security roles and authorizations across SAP ECC, S/4HANA, BW, Fiori, and other SAP systems.
• Lead GRC Access Control implementations including ARA (Access Risk Analysis), ARM (Access Request Management), BRM (Business Role Management), and EAM (Emergency Access Management).
• Conduct risk analysis and remediation of SoD (Segregation of Duties) conflicts and critical access.
• Collaborate with audit, compliance, and internal control teams to ensure adherence to regulatory requirements (e.g., SOX, GDPR).
• Perform periodic access reviews, user access certifications, and security audits.
• Provide guidance on SAP security best practices and governance frameworks.
• Support SAP upgrades, patching, and project initiatives from a security and compliance perspective.
• Train and mentor junior security analysts and business users on GRC tools and processes.

Required Qualifications:

• Bachelor’s degree in information technology, Computer Science, or related field.
• 7+ years of experience in SAP Security and GRC.
• Strong hands-on experience with SAP GRC Access Control 10.x/12.x.
• In-depth knowledge of SAP authorization concepts, role design, and user provisioning.
• Experience with SAP S/4HANA security and Fiori launchpad roles.
• Familiarity with regulatory compliance frameworks (SOX, GDPR, etc.).
• Excellent analytical, communication, and documentation skills.

Preferred Qualifications:

• SAP GRC or SAP Security certification.
• Experience with SAP IDM (Identity Management) or SAP Cloud Identity Services.
• Exposure to SAP HANA database security.
• Knowledge of IT General Controls (ITGC) and audit processes.
• Soft Skills:
• Strong problem-solving and critical thinking abilities.
• Ability to work independently and in cross-functional teams.
• Excellent stakeholder management and communication skills.

Work Environment:

• It is expected, at this time, you may be required as part of the job function to travel up to 50%.
• Candidates located within 25 miles of a DXC office will be required to work onsite 2–3 times per week.
• Must be legally authorized to work in the US without requiring sponsorship now or in the future.

Please note:  Many of our clients are in a controlled goods program environment and must comply with the International Traffic in Arms Regulations (ITAR), which mandates that all applicants be U.S. Persons.

At DXC Technology, we believe strong connections and community are key to our success. Our work model prioritizes in-person collaboration while offering flexibility to support wellbeing, productivity, individual work styles, and life circumstances. We’re committed to fostering an inclusive environment where everyone can thrive.

If you are an applicant from the United States, Guam, or Puerto Rico

DXC Technology Company (DXC) is an Equal Opportunity employer. All qualified candidates will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, pregnancy, veteran status, genetic information, citizenship status, or any other basis prohibited by law. View postings below .

We participate in E-Verify. In addition to the posters already identified, DXC provides access to prospective employees for the