Sr SAP Security Analyst

About RS Group

Across the industrial design, manufacturing and maintenance worlds, we’re the digital destination for product and service solutions to help our customers with the maintenance, repair and operation of their businesses. We provide global access to an unrivalled range of over 750,000 stocked industrial products. Each day our team of experts deliver solutions to resolve our customer’s challenges across design, procurement, inventory and maintenance. We consistently strive to deliver the best possible service to all of our customers and challenge ourselves to provide a seamless procurement experience.

We are one team. We deliver brilliantly. We do the right thing. We make every day better. These are our values. They unite our c.9,000 global colleagues and differentiate us from our competition. They are a mix of how we work today and how we must step up for the future. Most importantly, it is one set of values shaped by our people, for our people.

Together, we can make great things happen. Aim for amazing and beyond.

 

About the Role

Role Purpose

A seasoned professional with extensive expertise in SAP systems, applications, and processes, coupled with a profound understanding of SAP security architecture and controls. My experience encompasses SAP Governance, Risk, and Compliance (GRC) solutions, particularly Access Control and Process Control. I am well-versed in regulatory standards and best practices related to SAP security. My exceptional analytical and problem-solving skills are matched by my ability to communicate complex security issues effectively to stakeholders at all levels. I have a proven track record in managing user roles and authorizations, conducting comprehensive security audits, ensuring strict compliance with policies, and addressing security incidents with detailed root cause analysis. In my senior capacity, I lead the lifecycle management of certificates and oversee audit processes to ensure our SAP compliance procedures are in alignment with Group-level Information Security policies. I am entrusted with maintaining the integrity and security of global systems and networks, driving security initiatives through both predictive and reactive analysis, and conveying emerging trends to leadership and staff. I define strategic actions to mitigate security risks and spearhead projects to ensure adherence to RS Group security requirements. Furthermore, I develop and uphold robust security policies and procedures, lead the creation and implementation of company-wide security training programs, compile and submit essential security compliance reports, and work in close partnership with functional business teams to implement effective mitigating actions and controls.

 

Responsibilities

• Ensure SAP compliance procedures align with Group-level Information Security policies.
• Utilize proficiency in SAP systems, applications, and processes.
• Develop and maintain SAP security architecture and controls.
• Design, create and manage user profiles, roles, and authorizations in SAP, ensuring role-based access control is appropriately structured and implemented.  Be responsible for designing standards for profiles, roles and authorisations (e.g. naming standards, security granularity, etc.) and ensure these are enforced by the team.
• Ensure technical debt is addressed e.g. historical implementations have a clear roadmap for corrective action to simplify, standardise and ultimately tighten security.
• Actively monitor and control the access rights of users.
• Manage SAP Security using SAP Governance, Risk, and Compliance (GRC) solutions, utilizing Access Control and Process Control.
• Actively work to improve your teams Ways of Working to drive efficiency and drive higher standards through process improvements, documentation (e.g. standards, procedures, policies).
• Work closely with your manager to support the process of demand management and team capacity management ensuring the teams backlog is prioritised and tracked.
• Maintain the integrity and security of global systems and networks.
• Support security initiatives through both predictive and reactive analysis.
• Articulate emerging trends to leadership and staff and drive initiatives that improve our ways of working, tooling and security management.<