SAP Security Analyst

The Company is hiring a full-time, mid-level SAP Security Analyst to support SAP S/4HANA and SAP BW security in a SOX-regulated, multinational environment. The analyst reports to the SAP Security team lead and works directly with Process Owners, Business users, IT leads, Internal Audit and External Auditors.

The analyst will own core SAP security operations, including roles design and configuration, user provisioning and deprovisioning, and resolution of security and authorization issues. Responsibilities extend to SoD and sensitive access analysis in Security Weaver, SOX audit readiness and risk remediation.

The analyst will play a key role in strategic initiatives that support the Company's growth: integrating newly acquired companies into the SAP security framework, supporting SAP upgrades and securing third-party applications connected to SAP.

Key responsibilities

• Design, build and maintain single, derived and composite roles.

• Work with functional teams to translate business requirements into roles and authorization values.

• Maintain BW roles and analysis authorizations.

• Perform user provisioning, deprovisioning and role or job function changes through ServiceNow with approval evidence.

• Troubleshoot missing authorizations and security issues

• Resolve ServiceNow access tickets within agreed SLAs.

• Use Security Weaver for SoD risk analysis, access request workflows and emergency (firefighter) access.

• Conduct SoD and sensitive access analysis, document mitigating controls and drive remediation.

• Investigate SoD violations and draft false-positive justifications for review.

• Support periodic user access reviews and firefighter/emergency access log reviews.

• Respond to Internal Audit and External Auditor requests with system screenshots, table extracts and test evidence.

• Document security policies, procedures and role designs.

• Support ECC-to-S/4HANA security.

• Provide training and guidance to end users and internal teams on SAP security practices.

• Perform other duties as assigned.

Required qualifications

• Bachelor's degree in Information Technology, Computer Science or equivalent.

• 5 to 7 years of hands-on SAP Security experience S4/HANA and BW

• Strong role design skills: derived roles, org-level maintenance, authorization default values and authorization object field values.

• Hands-on experience with Security Weaver for SoD, emergency access and role management.

• Fiori security experience.

• Experience supporting SOX controls, SAP and SOX user audits, and evidence for external auditors.

• Proficiency with ServiceNow.

• Ability to translate technical security findings into actionable guidance for leadership.