Grc Consultant

Position: SAP Basis/Security Consultant with Onapsis Experience
Duration: 3 Months
Location: Remote (Atlanta)

Remote, with minimal travel to Atlanta, GA

Overview SAP Basis and Security consultant to install, configure, and operationalize Onapsis solutions (Onapsis Platform - Assess, Defend, Control, and/or Cloud Connector modules) across an SAP landscape. This is a hands-on engagement covering technical installation, security policy configuration, and integration into ongoing operations - not just an assessment or advisory role.

• Install and configure Onapsis Platform components (agents, connectors, and the central platform) across SAP ECC/S4HANA landscapes (dev, QA, prod).
• Integrate Onapsis with SAP Solution Manager, SIEM tools, and change management processes.
• Configure vulnerability scanning, threat detection, and compliance policies (e.g., SAP Security Baseline, NIST, GDPR/SOX-relevant controls) within Onapsis.
• Tune detection rules to reduce false positives and align with the organization's risk profile.
• Establish operational runbooks: alert triage, patch prioritization, and remediation workflows tied to Onapsis findings.
• Coordinate with SAP Basis team on system hardening, RFC/gateway security, and transport layer controls surfaced by Onapsis assessments.
• Knowledge transfer/documentation for internal team to sustain operations post-engagement.

• 5+ years SAP Basis administration (install, upgrade, transport management, system copies).
• Hands-on experience deploying and administering Onapsis (Platform, Assess, Defend, or Cloud Connector) - required, not just familiarity.
• Strong SAP security background: authorizations, RFC/gateway hardening, SAP Router, Secure Network Communications (SNC).
• Experience with SAP NetWeaver, S/4HANA, and underlying OS/DB (Linux, HANA/Oracle/DB2).
• Familiarity with SAP vulnerability management and patch cycles (SAP Security Notes).

Preferred Onapsis certification or documented prior Onapsis deployment(s), with references.

Experience integrating SAP security tooling with SIEM/SOC workflows.

Background in SAP GRC or Threat Detection.

Duration: 12 weeks initial install/config, optional ongoing support retainer

Remote with occasional on-site as needed

For applications and inquiries,