Senior Lead Analyst -Global Security and Controls

Experience Required

· At least 8 years of experience in SAP Security and GRC solutions

· A background in SAP ERP security architecture and implementation experience of SAP security from conception stage to completion.

· Extensive knowledge and hands on experience in SAP ECC, S/4HANA , Fiori, BTP, HANA DB security, BW security, SOLMAN, SOX audit and support of GRC 12.0

· Strong understanding of business processes and/or supporting SAP technologies

· Experience in implementation, auditing or advisory in SAP ERP and GRC domains

· Subject matter expert in SAP security design, being able to solve complex technical issues.

· Knowledge of compliance frameworks - ISO 27001, GDPR and SOX (controls frameworks, compliance and regulations)

· Understanding of business processes and segregation of duty concepts in an SAP ERP environment.

· Understanding of SAP security processes, security architecture and administration with a thorough knowledge of BW, Fiori and BPC elements.

· SAP security Consultation for Rollouts, Version upgrade, support, and implementation projects. Preparation of Requirement Specification, Blueprint, Test plan

· Analyse and diagnose customer feedback, formulating action plans that will improve VoC

· Work across boundaries within and external to Global ERP to ensure issues are resolved in a timely manner

· Identify opportunities for improvement and implement them.

Minimum Level of Education Required

· Graduate in related discipline or equivalent SAP certificated experience.

· ITIL Foundation Certification

Preferred Level of Education

· CISA, SAP Certified Technology Professional with relevant SAP Security certifications, ITIL Certification, CISM will be a plus.

Key Responsibilities

· Day to day management of the team (indirect reports) to provision user access in the ERP applications using the respective ticketing system.

· Responsible for designing, documenting standards and procedures for SAP user administration, outlining security creation and maintenance

· Implementing/delivering complex SAP security developments.

· Responsible for the approval of designs for new ERP security roles.

· Responsible for supporting the SAP security and authorization environment. This includes support for all security roles, profiles, Groups

· Engage with the wider business obtaining role build requirements

· Provide detailed process improvement ideas

· Work with the internal Controls and Compliance team to support SOX compliance in relation to General IT Controls over the SAP landscape.

· Responsible for responding to, and acting on, compliance related issues, including those raised by internal and external audit

· Drive innovation within the area of SAP security and controls, with a view to optimizing the control environment to enhance the security of our SAP landscape

· Work closely with our Information Services team around technical activity and contract management, supporting in BAU and on a project basis as required including supporting new ERP platform implementations as required

· To ensure all activities that are completed in the system are fully auditable

· Provide periodic reports to the ERP Security Leadership

· Develop relationships with stakeholders within the business

· Provide support for incidents relating to ERP Security

· Develop areas for improving the current processes

· Maintenance of relevant SOPs, standards, and best practices.

· Oversee security role ownership, approvals, access requests, role design, and change activities for both BAU & Projects

· Implementing/delivering complex SAP security developments.

· Enforce quality assurance and compliance for vendor-led security changes and serve as approver for PAM, EAM, and security system design.