Sr. SAP Security Analyst
Fort Worth, TX

Job Description

JOB SUMMARY

This position offers a great opportunity in fast-paced growing SAP Security area. The Sr. SAP Security Analyst will be responsible for the design, configuration, implementation, maintenance and support of SAP security in multiple landscape environment that includes ITAR or other regulatory restrictions. The position will be responsible for ensuring that all IT Security policies are in compliance and running to full efficiency. In addition, this role will assist with the monitoring of various activities using SAP GRC in support of meeting applicable compliance objectives. The candidate must be able to identify areas of IT risk in the SAP environments and identify opportunities to help improve information security, and business process.

This role also includes performing lead duties that may include, reviewing other analyst work, providing approvals, assisting with internal and external audits, managing projects, etc.

RESPONSIBILITIES

* Utilize the SAP Profile Generator to create new and modify existing SAP Security Roles/profiles
* Troubleshoot existing user roles, security objects and authorizations to resolve security conflicts
* Perform regular system audits to detect deviations of established procedures, role mapping, unauthorized system activity and report findings to management
* Utilize the Segregation of Duty (SOD) system tool to validate user role assignments and to validate modifications to Roles and profiles
* Support integration testing of roles/profiles
* Verification of approvals regarding user access modifications
* Enhance and support the Access Control module
* Improve user experience of SAP GRC users by enabling FIORI Apps
* Assist team in performing review and monitoring activities using SAP GRC
* Assist as an SAP Security subject matter expert and provide technical direction to team members
* Monitor jobs that are necessary for the automated process and compliance to run effectively and efficiently
* Review the security patches to be applied to the SAP landscape
* Perform security reviews of SAP systems and participate in audit and compliance activities
* Solve technical and complex problems across the SAP landscape related to security
* Assist in identifying gaps in security administration process and procedures as well as areas for significant improvement, optimization and automation
* Interface effectively with customers, vendors, and peers
* Knowledge and understanding of system landscape and migration flow
* Monitor progress on work queues to ensure that all open items are being resolved in a timely fashion
* Develop, maintain, implement, and communicate security policies and procedures
* Work with the business managers in refining or changing SAP roles
* Interface effectively with customers, vendors, and peers
* Knowledge and understanding of system landscape and migration flow
* Mentor others in troubleshooting, priority setting, and project management
* Manage various types of projects either internal to the COE or external assisting the business upon request

EDUCATION/EXPERIENCE

* Bachelor's degree required
* Minimum of 6 years of IT experience
* SAP GRC Certification is a plus

SKILLS/COMPETENCIES

* Five or more years of analysis, development, and maintenance of SAP Security
* Experience in designing and deploying overall security for large corporations using S/4 HANA, ECC, BI/BW, PI/PO, EWM, Solution Manager, FIORI Gateway
* Working experience on GRC 10.0 or 12.1 is desirable
* Experience of migrating SAP Roles to S/4 HANA is a plus
* Understanding of SAP Cloud Security
* Knowledge of risk assessment procedures, authorization methodologies, and authentication technologies
* Understanding of segregation of duties and Sarbanes-Oxley regulations with respect to application security
* Superior organizational skills and excellent communication skills
* Strong customer service skills
* Solid project management skills, and team-oriented interpersonal skills
* General familiarity with SAP FI, CO, SD, MM, PP, BW, EWM, Hybris, PI/PO, CPI, and portal landscape highly preferred
* Ability to manage project work along with daily analysis of Security Requests and troubleshooting user problems
* This position requires use of information which is subject to the International Traffic in Arms Regulations (ITAR). All applicants must be U.S. persons within the meaning of ITAR. ITAR defines a U.S. person as a U.S. Citizen, U.S. Permanent Resident (i.e. 'Green Card Holder'), Political Asylee, or Refugee