SAP Enterprise Application Security Analyst

Position Description:
Dedicated point of contact for enterprise application security data and activities. Maintain enterprise application environment to comply with security architecture, configuration, and policies and procedures. Manage system and data governance and implement security best practices, adhere to compliance requirements, and safeguard against potential data security threats.
Essential Duties & Key Responsibilities:
•Maintain administration of data security components in enterprise application (e.g., SAP) environment in compliance with security architecture, configuration, and Information Services (IS) policies and procedures.
•Manage governance of user provisioning, design new roles, manage change control process as per guidelines, and provide necessary documentation for audit and compliance of enterprise application security environment.
•Assign user accounts and access privileges for enterprise application systems. Perform user provisioning, role assignments and deactivations as directed, ensure proper segregation of duties and adherence to access control policies based on business requirements.
•Maintain updated process documentation of enterprise application security configurations, policies, and procedures.
•Participate in annual User Access Review (UAR) and audit processes, apply UAR changes to enterprise application as required, create reports, and provide follow up on responses and questions.
•Conduct periodic reviews of user access to mitigate risks related to excessive privileges to enforce segregation of duties (SoD).
•Generate security-related reports from enterprise application to monitor compliance and identify risks.
•Provide enterprise application incident management with Tier II and Tier III support team, engage with stakeholders to understand incident, conduct research, and communicate and provide timely resolution of issues.
•Collaborate with enterprise application system administrators and developers to integrate software solutions.
•Develop and maintain enterprise application SoD rules and policies.
•Maintain understanding of enterprise application industry trends, regulations, and standards.
•Coordinate and apply security patches for enterprise application systems.
•Provide training to enterprise application users on security best practices and compliance requirements.
•May be required to work shifts and/or provide on-call to support organizational needs.
•Other activities, duties, and responsibilities as assigned.
Qualifications:
•Bachelor's Degree from accredited degree program in Computer Science, Software Engineering, or related field with minimum of 5 years of experience, or equivalent combination of education, training, and experience
•Experience as enterprise application security administrator (SAP Security Administrator preferred)
•Deep understanding of enterprise application security concepts and best practices (SAP Security required)
•Familiar with GRC (Governance, Risk, and Compliance) tools (SAP Security required)
•Continuous learning mindset and knowledgeable of general security-related information technology topics, products, and services
•Advanced understanding of enterprise application security concepts and best practices (SAP Security required)
•Knowledgeable of SAP ERP, Security Profile Generator, creating security roles and users, user authorizations and administration, system access, and Central User Administration (CUA)
•Experience in specialized enterprise application SAP security modules: HR, BI, CRM, BPC, Business Objects, GRC, HANA, and/or Solution Manager
•Strong analytical thinking and problem-solving skills
•Ability to monitor and report on deliverables with focus on meeting deadlines
•Demonstrate interpersonal skills and collaborative teamwork
•Professional and clear verbal and written communication skills
•Ability to communicate to non-technical audiences and tailor communications appropriately across organizational levels
•Familiar with continuous improvement principles and concepts
•Able to work shifts and/or provide on-call support as required
•Proficient computer skills and Microsoft Office suite of applications and collaborative tools

Work arrangement
Yes