SAP Security & GRC Engineer

DUTIES AND RESPONSIBILITIES
Continuous monitoring of critical system access
Work with the functional, development, and technical teams to ensure requirements are understood and have all possible details captured to develop the solution for application security
Perform regular health checks to detect deviations of established procedures, role mapping, unauthorized system activity, and report findings
Ensure that changes to roles and system are tested, approved, and completed according to regulatory and compliance requirements
Support identifying risks and designing the SOD (Segregation of Duties) Matrix
Provide support for users with security-related problems and assist functional and technical teams with troubleshooting critical issues, as it relates to security roles
Support of program audit activities
Design and implement continuous monitoring controls
Work closely with IT Security team
Administer solution that facilitate user provisioning/de-provisioning, authentication/authorization and reporting based on business needs, industry best practices, and audit/regulatory requirements by working with functional team and business role owners
Identify and implement continuous improvement opportunities to drive process efficiencies
applying conceptual knowledge and technology to solve sophisticated business processes and procedural problems
Resolve customer complaints/technical issues in collaboration with support team and responds to suggestions for improvements and enhancements.
Perform hands-on technical configuration of security on SAP applications when required, for example in high risk or highly sophisticated enhancements.
Assist in management of technical changes through the landscape, responsibility for quality and assurance that control points are satisfied.

Working Experience

EDUCATION AND/OR CERTIFICATION REQUIREMENTS
Bachelor s in computer science or combination of relevant education, experience, and training.

SKILLS REQUIRED TO PERFORM THIS ROLE.
Hands-on SAP Security support and configuration experience.
An understanding of SAP Authorization concepts in an Enterprise environment (Single/Composite roles and role derivation)
SAP security, GRC Technical skills, covering the main functional areas and Basis components.
Experience in developing, administering, and monitoring the GRC ruleset
Adept at analyzing SoD risks and reviewing user s IDs/roles with respect to SoD resolutions
Proficient in identifying and analyzing mitigating controls for SoD conflicts
Assist in management of technical changes through the landscape, responsibility for quality and assurance that control points are satisfied.

An understanding of key business process risks.
Awareness of Information Security principles.