Job Description

The Associate Security Governance, Risk & Compliance (GRC) Analyst is a critical position within the team and has risk and compliance responsibilities from a technology and security perspective across the organization globally. The main objective of the Security GRC team is to deliver best in class Security Governance, Risk and Compliance, services to ensure that customer operates in a risk mitigated, security managed environment and that customer's security compliance objectives are being met. Also be responsible for daily operational activities like troubleshooting, error handling, password resets, OSS messages, user provisioning and terminations and fixing/adjusting SAP Roles Complete process documentation and quick user guides, and should adopt to the customer defined Security guidelines.

Qualifications:

• 3+ years experience with SAP Security and User / Role Administration
• 2+ years experience with CUA, GRC, SOX and Audit
• Experience in the areas SAP Security and Controls/GRC
• Experience in working in multiple customer environments
• Good English language written and oral communication skills
• Ability to work collaboratively as part of a global team
• Experience in development of SAP application security roles
• Experience in SAP GRC Access Controls Suite / Process Controls Suite
• Experience in SAP S/4HANA, ECC, BI/BW, BPC, Fiori Security
• Experience in SAP Security upgrades and/or rollouts
• This position may require domestic and international travel as needed to meet business and client requirements.
• Selected applicant will be subject to a background investigation, which will be conducted and the results of which will be used in compliance with applicable law.

Responsibilities Duties:

• Handling of all operational day-to-day support activities for security/authorizations including ticket resolution
• Role Maintenance: Creating single, composite, and derived roles; Copying from SAP standard roles; creating role templates or using SAP delivered templates; transporting roles from development system to quality and finally into production systems; Deleting roles.
• Authorization Profiles: Generating authorizations and authorization profiles, user reconciliation, inserting missing authorizations, maintaining open authorization fields and organizational values; having good knowledge over SU53 dump, ST01 trace, object classes, objects, fields, field values, authorizations, and profiles. Working with user information system (SUIM), maintaining check maintain values (SU24) and roles (AGR*) tables
  • Use of SU24 to check the standard T-code authorization objects and SU53 for missing authorization
  • Experience in analyzing and processing, SOD and SOX issues.
  • Performed User Master Reconciliation using (PFUD and SUPC ).
• Administration of SAP Security and Controls
• Administration of SAP GRC AC Suite
• Maintenance of Central User Administration (CUA).
• Generated Audit Information Systems (AIS) logs (SM19, SM20, SM18)
• Assisting with control reviews and risk assessments
• Actively seeking continuous improvement opportunities and leading improvement initiatives
• Development of solutions for securing custom transactions, tables, and programs
• Experience in configuring and/or supporting the implementation of security controls within an SAP environment
• Operate SAP security for development, quality assurance, sandbox, training, and production systems

Key Skills:

Experiance Qualifications:

Benefits: