SAP GRC CCM Engineer / Admin

No Agencies
No C2C candidates
Job Description: This role is for a SAP GRC CCM Engineer / Admin

The following details required and desired skills for this role:

SAP GRC CCM Expertise
• In‐depth knowledge of SAP GRC Continuous Control Monitoring (CCM) architecture and data model
• Ability to design, configure, and maintain CCM rules, data sources, and monitoring plans

Engineering Methodology
• Experience with standard engineering process
• Background in doing requirements discovery and translation from business requirements to technical requirements / deliverable
• Experience with software systems design

Data Integration & Extraction
• Connecting CCM to SAP source systems (SAP ECC, S/4HANA, BW, CRM, MDG, GTS, Solution Manager/Focused Build, Ariba, SuccessFactors) via RFC, OData, or SAP Extraction Framework
• Experience with non‐SAP data sources (SQL Server, Oracle, flat files) using SAP Data Services or SAP Cloud Platform Integration

Rule Development & Testing
• Building business‐rule logic using SAP Business Rules Framework (BRFplus) and CCM rule editor
• Conducting unit‐ and integration‐testing, handling rule versioning and change‐management

Alert Management & Workflow
• Configuring alert thresholds, escalation paths, and automatic remediation workflows
• Integration with SAP GRC Access Control, Process Control, and external ticketing systems (ServiceNow, Remedy)

Reporting & Analytics
• Designing dashboards and KPI visualizations in SAP Analytics Cloud, SAP Lumira, or Power BI for CCM results
• Generating periodic compliance and audit‐ready reports

Compliance & Regulatory Knowledge
• Understanding of SOX, GDPR, ISO 27001, NIST, and industry‐specific controls that benefit from continuous monitoring
• Mapping CCM controls to Sensitive Access Risks and audit frameworks

SAP Basis & Landscape Understanding
• Familiarity with SAP system landscapes, transport management (CTS), and performance considerations for high‐volume data extraction
• Coordination with Basis for system sizing, scheduling, and security authorizations (PFCG roles)

Scripting & Automation
• Basic ABAP/ABAP Objects for custom data extraction or enhancement
• Use of PowerShell, Python, or Bash scripts to automate data loads, rule deployments, and report distribution

Problem‐Solving & Incident Response
• Monitoring CCM job logs, diagnosing data latency or rule failures, and implementing corrective actions
• Collaboration with IT security and audit teams for rapid remediation of control violations

Project & Change Management
• Leading CCM implementation or upgrade projects (Agile or Waterfall)
• Managing change requests, documentation, and stakeholder communication

Communication & Training
• Producing clear documentation of CCM configurations, control mappings, and operating procedures
• Training business owners, auditors, and end‐users on CCM functionality and interpretation of alerts

Soft Skills
• Strong analytical mindset and attention to detail
• Ability to translate complex technical concepts into business‐focused language
• Proactive attitude toward continuous improvement and staying current with GRC best practices