SAP Security GRC

Job Description

REQUIRED SAP GRC Modules

• ARA (access risk analysis)
• EAM (Emergency Access Module)
  

WORK ACTIVITIES/CONTEXT:

• Supports SAP security design for SAP ECC, Portal, and GRC to ensure that all application modules are functional and secure.
• Ensures alignment with security policies, procedures, and industry standards.
• Collaborates with Technology on the development and maintenance of SAP security policies and procedures based on industry-standard best practices.
• Keeps current with emerging SAP Security or GRC alerts and issues.
• Attends formal training sessions and/or conferences to enhance skills relevant to position.
• Evaluates new processes and systems for gaps, risks, or improvements to security processes, and makes recommendations for aligning with the SAP Program and controls structure.
• Stays current on upcoming system implementations and business process changes that impact SAP security or GRC processes.
• Manages and supports the SAP GRC Access Risk Analysis module for segregation of duties, emergency access, and access provisioning oversight.
• Troubleshoots existing user roles, security objects and authorizations to resolve issues for various SAP Landscapes (ECC, Portal, GRC)
• Maintains knowledge in designated core business processes (i.e. Accounts Payable, Payroll) and is knowledgeable in how SAP facilitates those business processes from a controls perspective. Maintains an understanding of applications that interface with SAP through continuous learning, participation in user forums and “best practice” research.
• Provides legendary Customer Service to Internal and External Customers by providing security process improvement guidance related to changes to existing processes or development of new processes that utilize SAP and peripheral systems.
• May assist in the development of business cases to help prioritize opportunities and champion security improvement projects. May be required to facilitate discussions with various Internal Customers to facilitate business case development.
• Participates heavily in SAP ECC, Portal, or GRC design, data conversion, testing, and implementation of security changes and associated documentation.
• Responsible for ensuring that SAP security changes implemented adhere to Company change management policies. Documentation requirements for SAP security-related are completed timely and as expected to ensure that appropriate technical documentation exists.
• Documents requirements for SAP security-related interfaces (inbound and outbound), including data mapping, functional specifications, test plans, and error handling procedures. Will be responsible for creating test data, testing interfaces, defect resolution, and ongoing production support of SAP interfaces.
• Reviews test results for SAP enhancements, defects, and project implementations to ensure integrity and completeness of testing activities as it relates to security or GRC processes.
• Provides timely support for SAP- incidents or service requests related to production Security or GRC issues, defects, job requests, research, or access requests.
• May perform risk assessments of data integration points with SAP, and as needed, assists in the design of appropriate controls.
• Serves as liaison between business users and Technology support.
• Must be able to meet any physical ability requirements listed on this description.
• May perform other job duties as directed by Employee's Leaders.
• Must be able to meet any physical ability requirements listed on this description.
• May perform other job duties as directed by Employee’s Leaders.
  

BASIC QUALIFICATIONS: 

• High School Diploma, GED or equivalent education required. 
  
• Must be at least 18 years of age. 
  
• Must have the authorization to work in the United States as defined by the Immigration Reform Act of 1986.
  

EDUCATION:

• Bachelor’s degree with the focus in Business Management Information Systems or Computer Science disciplines required.

WORK EXPERIENCE:

• 3-5 years of relevant professional work experience required.
• 3+ years of SAP ERP ECC Security experience required.
• 3+ years working across multiple financial and/or business processes (Finance, HR, Technology, etc).
• SAP GRC 10.0 experience preferred.

LICENSING / CERTIFICATION:

• Professional certification such as SAP Certification, PMP, or CISA preferred, but not required.

SKILLS / ABILITIES / KNOWLEDGE / WORK STYLE:

• Must be able to comply with Company attendance standards as described in established guidelines.
• Must be able to comply with Company attendance standards as described in established guidelines.
• Extensive knowledge of SAP ECC role based security and GRC 10.0
• Deep knowledge of Structural Authorization and Portal
• Knowledge of Identity Manager, as it relates to automatic provisioning of access.
• Ability to conduct research into security issues, standards, and products as required.
• Ability to solve problems quickly and automate processes
• Proficiency in areas of business continuity, security, and data privacy; ensures systems are designed and built with appropriate levels of protection.
• Strong analytical and organizational skills are required
• Demonstrates the ability to successfully manage multiple assignments and/or projects simultaneously.
• Handles responsibilities and achieves desired results with minimal supervision.
• Must have ability to perform well under pressure
• Ability to use a computer with speed and accuracy sufficient to meet the demands of the job.
• Demonstrates integrity in all actions and decisions.
• Has demonstrated capacity to translate broad Company objectives into specific actionable items associated with designated business processes.
• Maintains an understanding of end to end business processes.
• Good oral and written communication skills; good meeting facilitation and presentation skills.
• Strong time management and organizational skills, with the ability to manage detailed, concurrent tasks.
• Ability to meet deadlines with quality results while managing risk.
• Displays a sense of urgency.

Experience with SAP GRC Access Control configuration and widely accepted practices for implementing SAP GRC Access Control.

• Experience with requirements gathering techniques and preparation of requirements documents.
• Accurate and complete testing and documentation skills.
• Ability to effectively manage projects from initiation through to implementation using SWA preferred methods.
• Identifies project risks and routinely pursues mitigation strategy.
• Proficiency in progress reporting methods and techniques and risk management methods and techniques.
• Ability to see beyond today’s activities and proactively plan for the future, aligning with Company objectives.
• Strong analytical and problem-solving skills and demonstrated use of analytical and problem-solving skills.
• Demonstrates strong ability to think strategically, not just the limited scope of one aspect of a project.
• Demonstrated ability to assemble and organize data and lead a fact-based approach to drive an optimal solution for the Company.
• Demonstrates dedicated, proactive Customer Service to all Internal and External Customers.
• Willing to take responsibility for finding solutions, even if problems are not in the sphere of influence.
• Knowledge of designated core business processes.
• Working knowledge of SOX and internal controls compliance.
• Positively influences the behavior of others and works effectively as part of a Team.
• Proficiency in Microsoft Outlook, Excel, Word & PowerPoint.

OTHER QUALIFICATIONS:

• Must meet confidentiality expectations as to confidential, proprietary and sensitive Company information.
• Must successfully complete the evaluation period.
• Occasional travel and/or extended work hours may be required with possibly increased or concentrated frequency, depending on specific assignment.
• Must maintain a well-groomed appearance per Company appearance standards as described in established guidelines.
• Must be a U.S. citizen or have the authorization to work in the United States as defined by the Immigration Reform Act of 1986.
• Must maintain a well-groomed appearance per Company appearance standards as described in established guidelines.

Qualifications

Additional Information

GOOD COMMUNICATION SKILLS

DURATION: 6+ Months Contract  

INTERVIEW: PHONE & SKYPE