Back to Jobs

SAP GRC CCM Engineer / Admin

#28923092

USA Right to Hire On-Site Flexibility/Remote: 100%

Apply now

Posted on July 22, 2026

No Agencies
No C2C candidates

Job Description:	This role is for a SAP GRC CCM Engineer / Admin The following details required and desired skills for this role: SAP GRC CCM Expertise • In‐depth knowledge of SAP GRC Continuous Control Monitoring (CCM) architecture and data model • Ability to design, configure, and maintain CCM rules, data sources, and monitoring plans Engineering Methodology • Experience with standard engineering process • Background in doing requirements discovery and translation from business requirements to technical requirements / deliverable • Experience with software systems design Data Integration & Extraction • Connecting CCM to SAP source systems (SAP ECC, S/4HANA, BW, CRM, MDG, GTS, Solution Manager/Focused Build, Ariba, SuccessFactors) via RFC, OData, or SAP Extraction Framework • Experience with non‐SAP data sources (SQL Server, Oracle, flat files) using SAP Data Services or SAP Cloud Platform Integration Rule Development & Testing • Building business‐rule logic using SAP Business Rules Framework (BRFplus) and CCM rule editor • Conducting unit‐ and integration‐testing, handling rule versioning and change‐management Alert Management & Workflow • Configuring alert thresholds, escalation paths, and automatic remediation workflows • Integration with SAP GRC Access Control, Process Control, and external ticketing systems (ServiceNow, Remedy) Reporting & Analytics • Designing dashboards and KPI visualizations in SAP Analytics Cloud, SAP Lumira, or Power BI for CCM results • Generating periodic compliance and audit‐ready reports Compliance & Regulatory Knowledge • Understanding of SOX, GDPR, ISO 27001, NIST, and industry‐specific controls that benefit from continuous monitoring • Mapping CCM controls to Sensitive Access Risks and audit frameworks SAP Basis & Landscape Understanding • Familiarity with SAP system landscapes, transport management (CTS), and performance considerations for high‐volume data extraction • Coordination with Basis for system sizing, scheduling, and security authorizations (PFCG roles) Scripting & Automation • Basic ABAP/ABAP Objects for custom data extraction or enhancement • Use of PowerShell, Python, or Bash scripts to automate data loads, rule deployments, and report distribution Problem‐Solving & Incident Response • Monitoring CCM job logs, diagnosing data latency or rule failures, and implementing corrective actions • Collaboration with IT security and audit teams for rapid remediation of control violations Project & Change Management • Leading CCM implementation or upgrade projects (Agile or Waterfall) • Managing change requests, documentation, and stakeholder communication Communication & Training • Producing clear documentation of CCM configurations, control mappings, and operating procedures • Training business owners, auditors, and end‐users on CCM functionality and interpretation of alerts Soft Skills • Strong analytical mindset and attention to detail • Ability to translate complex technical concepts into business‐focused language • Proactive attitude toward continuous improvement and staying current with GRC best practices

Job Description:

This role is for a SAP GRC CCM Engineer / Admin

The following details required and desired skills for this role:

SAP GRC CCM Expertise
• In‐depth knowledge of SAP GRC Continuous Control Monitoring (CCM) architecture and data model
• Ability to design, configure, and maintain CCM rules, data sources, and monitoring plans

Engineering Methodology
• Experience with standard engineering process
• Background in doing requirements discovery and translation from business requirements to technical requirements / deliverable
• Experience with software systems design

Data Integration & Extraction
• Connecting CCM to SAP source systems (SAP ECC, S/4HANA, BW, CRM, MDG, GTS, Solution Manager/Focused Build, Ariba, SuccessFactors) via RFC, OData, or SAP Extraction Framework
• Experience with non‐SAP data sources (SQL Server, Oracle, flat files) using SAP Data Services or SAP Cloud Platform Integration

Rule Development & Testing
• Building business‐rule logic using SAP Business Rules Framework (BRFplus) and CCM rule editor
• Conducting unit‐ and integration‐testing, handling rule versioning and change‐management

Alert Management & Workflow
• Configuring alert thresholds, escalation paths, and automatic remediation workflows
• Integration with SAP GRC Access Control, Process Control, and external ticketing systems (ServiceNow, Remedy)

Reporting & Analytics
• Designing dashboards and KPI visualizations in SAP Analytics Cloud, SAP Lumira, or Power BI for CCM results
• Generating periodic compliance and audit‐ready reports

Compliance & Regulatory Knowledge
• Understanding of SOX, GDPR, ISO 27001, NIST, and industry‐specific controls that benefit from continuous monitoring
• Mapping CCM controls to Sensitive Access Risks and audit frameworks

SAP Basis & Landscape Understanding
• Familiarity with SAP system landscapes, transport management (CTS), and performance considerations for high‐volume data extraction
• Coordination with Basis for system sizing, scheduling, and security authorizations (PFCG roles)

Scripting & Automation
• Basic ABAP/ABAP Objects for custom data extraction or enhancement
• Use of PowerShell, Python, or Bash scripts to automate data loads, rule deployments, and report distribution

Problem‐Solving & Incident Response
• Monitoring CCM job logs, diagnosing data latency or rule failures, and implementing corrective actions
• Collaboration with IT security and audit teams for rapid remediation of control violations

Project & Change Management
• Leading CCM implementation or upgrade projects (Agile or Waterfall)
• Managing change requests, documentation, and stakeholder communication

Communication & Training
• Producing clear documentation of CCM configurations, control mappings, and operating procedures
• Training business owners, auditors, and end‐users on CCM functionality and interpretation of alerts

Soft Skills
• Strong analytical mindset and attention to detail
• Ability to translate complex technical concepts into business‐focused language
• Proactive attitude toward continuous improvement and staying current with GRC best practices

Apply now