Job Description & Details
This is a hands-on SAP GRC Process Control contract role requiring deep expertise in designing compliance frameworks, setting up continuous control monitoring, and handling S/4HANA migrations. You will bridge the gap between technical system configurations and strict audit requirements while occasionally traveling to Washington DC. It is a solid gig for someone who knows GRC inside out and wants to avoid the monotony of routine support tickets by focusing on automation and architecture.
What You'll Actually Be Doing
You will spend your days configuring SAP GRC Process Control modules, setting up master data, and building out automated control testing to make life easier for internal and external auditors. Expect to roll up your sleeves on Continuous Control Monitoring (CCM), setting up business rules, and writing custom script logic. A significant part of the job involves mapping traditional ECC controls over to modern SAP S/4HANA environments and tackling remediation plans when control deficiencies inevitably pop up during assessments.
The Core Tech Stack
You need absolute mastery over SAP GRC Process Control (v10.1, 12.0+) and a solid grasp of Continuous Control Monitoring (CCM). Experience with SAP S/4HANA security paradigms and Fiori applications is heavily leaned on here because the company is modernizing their stack. Knowing your way around SAP Access Control (AC) for integration and having basic ABAP or SQL knowledge for custom rule scripting will save you countless headaches.
Interview Expectations
Expect the hiring manager to ask you to walk through a specific scenario where you designed and implemented automated control testing from scratch, probing into how you handled data source connectors and business rules. They will also test your knowledge of translating legacy ECC controls into an S/4HANA architecture, specifically looking for how you manage authorization models and table schemas to satisfy SOX 404 compliance without breaking business processes.
Application Advice
Make sure your resume screams SAP GRC Process Control and explicitly highlights your hands-on experience with CCM and S/4HANA. Don't just list modules; drop specific keywords from the job description like 'Design Effectiveness', 'Continuous Control Monitoring', 'SOX 404', and 'Access Control Integration' so you easily clear the ATS filters and grab the attention of the technical lead reviewing your profile.