Lead​/Principal Specialist - SAP Security and GRC

Description

As of November 1, 2025, Sunoco LP has successfully completed its acquisition of Parkland Corporation. For more information, please visit

Competitive Benefits. Meaningful Extras. Unmatched Value.

• A place where you can take your career in the direction you want to grow and go

The Opportunity:

The Lead/Principal Specialist - SAP Security and GRC is responsible for the design, architecture, implementation, and management of robust SAP security and Governance, Risk, and Compliance (GRC) solutions. This role ensures the protection of enterprise data, adherence to regulatory compliance, and support for secure business operations across the SAP landscape including on-premises and cloud environment.

Responsibilities:

• Security Architecture & Design:
  Architect, implement, and maintain the comprehensive SAP security framework, including user provisioning, role management, Fiori administration, and authorization concepts across various SAP systems (e.g.: S/4
  
  HANA, Fiori, BTP, Build Work Zone, SAC, Datasphere, AI etc.).
• GRC Implementation & Optimization:
  Lead the Architecture design, deployment, configuration, and optimization of SAP GRC Access Control and Process Control modules to support compliance and risk management initiatives.
• Risk & Compliance Management:
  Ensure compliance with internal security policies and external regulations (e.g., SOX, GDPR). Support internal and external audits by providing documentation and expertise on SAP security and GRC controls.

Problem Resolution

• Research production issues and enhancement requests related to all SAP Security aspects of S4
  
  HANA, Fiori, UI Data Protection, BPC, BTP IAS/IPS, Build Work Zone, BPA, BIS, SAC, Datasphere, and GRC Access & Process Controls, and make appropriate configuration changes.
• Initiate action and evaluate issues to develop alternative solutions, applying expert knowledge to resolve problems.
• Conduct day-to-day troubleshooting and break-fix activities for SAP security and cloud services such as BTP IPS, IAS, Work Zone, BPA, Could ALM, Datasphere, SAC and third-party reporting tools.
• Provide 24x7 support for SAP production systems, including telephone support.

SAP Security & Governance

• Manage user provisioning, role design, UI Data protection masking, SSO across SAP systems and cloud platforms (S4
  
  HANA, GRC, Fiori, BPC, BTP IAS/IPS, Work Zone, BPA, BIS, SAC, Datasphere, AI Joule).
• Maintain and monitor GRC Access Control workflows, business roles, risk analysis, and emergency access management.
• Support GRC Process Controls for compliance with and audit requirements by managing CCM, MCP and Policy management.
• Identify and implement efficiency improvements in SAP security processes, GRC solutions and cloud integration.
• Recommend and implement approved process enhancements or new functionality.

Business Interaction

• Collaborate with business stakeholders to analyze requirements and translate them into SAP security and governance solutions.
• Provide guidance on best practices for access management and compliance.

Configuration & Testing

• Configure SAP security roles and perform unit testing in accordance with specifications.
• Document business procedures, configuration changes, test scenarios, and training materials.

Project Management

• Plan, direct, and coordinate SAP security-related projects to ensure timely delivery within defined constraints.
• Identify and schedule project deliverables, milestones, and tasks.

Knowledge Transfer

• Develop and conduct training sessions for business users and IT resources on SAP security and GRC processes.
• Mentor team members to enhance their understanding of SAP security and compliance.

SOX Compliance

• Ensure all changes and enhancements follow SOX control processes.
• Recommend and implement improvements to change control processes as needed.
• Technical Leadership:
  Provide expert guidance and technical leadership on all SAP security matters to project teams, business process owners, and IT teams.
• Documentation & Standards:
  Develop and maintain comprehensive security documentation, including architecture diagrams, technical specifications, and operational procedures.
• Emerging Technologies:
  Evaluate new SAP technologies (e.g., SAP HANA DB…