Lead Analyst, SAP GRC Security

Now that you’ve found the job description, what’s next?

At VF, we strive to foster a culture of belonging based on respect, connection, openness, and authenticity.  As a purpose-led, performance-driven company, we are committed to inclusion, diversity, equity, and action. So, before we get to the job details, take a minute to learn a little more about us – our values and our culture - visit VF Careers or www.vfc.com.

What will you do?

A day in the life of a Lead Analyst, SAP GRC Security at VF looks a little like this.

As VF Corporation continues to develop and mature its SAP Governance, Risk, and Compliance capabilities, we are creating the position of Lead Analyst, SAP GRC Security, which will report into the Senior Manager, SAP GRC Security. This position will have specific responsibilities for management of VF’s Global SAP GRC environment and be responsible for partnering with the Senior Manager, SAP GRC Security and the Senior Manager, SAP Compliance to maintain the effective operation of VF’s SAP GRC system.   

Let’s break down that day in the life a bit more. 

• Configure and maintain GRC 12 Access Request Management (ARM), Access Risk Analysis (ARA), Business Role Management (BRM) and Emergency Access Management (EAM) functionality.  

• Configure and maintain GRC 12 UAR functionality and support quarterly access reviews leading to successful completion. 

• Lead and Manage complex SAP GRC or SAP Security projects and support global SAP initiatives with SAP GRC or Security needs. 

• Day to day technical support and resolution of GRC issues working with both SAP Support and SAP BASIS teams. 

• Provide support from the SAP GRC or security perspective for projects including new SAP system implementations, implementation of new capabilities affecting SAP GRC or Security, or new compliance initiatives. 

• Assist with application-level operational support for SAP GRC (not including basis level support) Access Request Management, Business Role Manager, Access Risk Analysis, and Emergency Access Request modules. 

• Partner with SAP Compliance to configure and maintain the GRC ruleset and related Risks, Functions, and Mitigating Controls. 

• Analyze and remediate GRC SOD Risks at both user level and role level to resolve and avoid financial and operational risks. 

• Evaluate OSS Notes, upgrades, etc. and provide impact analysis, risks, and recommendations for implementation. 

• Confirm functionality post OSS note or upgrade installation. 

• Configure and apply GRC mitigating controls for approved SOD and Privileged access risks. 

• Support Audit and Compliance teams by providing them with reports and analysis needed for external and internal audits or testing. 

• Lead testing and validation efforts to ensure GRC Support Pack (SP) levels are implemented and are current to VF standards. 

• Lead testing and validation efforts associated with connected system SAP version upgrades and enhancements. 

• Actively pursue Process improvement opportunities to introduce new capabilities and improve business performance with a focus on an “automation first” strategy. 

• Design, implement, and support SAP access security requirements and role design to secure the GRC environment. 

• Lead and support the integration of new SAP environments into the GRC landscape. 

• Work with the Business Process Owners and other security teams to restrict sensitive transactions and security authorizations and ensured segregation of duties (SOD) and adherence to the global SAP security strategy across all business areas. 

• Provide support and ensure that all project activity involving the SAP landscape follows established global standards as it relates to SAP GRC and Security at VF. 

• Mentor and train junior staff on technical advances as well as current and new features of the GRC platform. 

What do you need to succeed?

We all have unique skills that we bring to work and celebrate every day. For this role, there are foundation skills you’ll need to succeed and excel. Additionally, while formal education in a related field is great to have, we are most interested