SAP Compliance and Security Specialist/Lead Audit Analyst - Clearance Required

Overview

This position is on the staff of a government consulting firm located in Tysons, VA. The SAP Compliance and Audit Readiness Specialist will work on-site or remotely for GCSS-Army client and assisting the GCSS-Army Audit Readiness lead.  The primary responsibilities include supporting external audit reviews, preparing documentation to support audit reviews, collaboration with PEO EIS Audit Cell and other ERPs to ensure consistency at Army Enterprise level.  

Responsibilities

Position is also responsible for conducting and documenting annual reviews of IT internal controls, and assisting Audit Readiness lead in building compliance framework to ensure internal controls are defined, communicated, and followed. 

 

Additional responsibilities will include efforts pertaining to management of the SAP Firefighter provisioning process for elevated system access, conducting weekly reviews of account usage, tracking, and monitoring the inventory of provisioned IDs, updating and obtaining documentation and approvals for all IDs, pro-active management, monitoring and documentation of Firefighter requests, training. Additional responsibilities include but are not limited to management, monitoring, and documentation of the annual SAP role reaffirmation process, evaluation of role revision requests, generation of SAP SOD and CA report as well as development of policies and procedures to support Audit Readiness and RMF Cyber requirements.

Responsibilities:

• Support Audit Readiness lead during external and internal Audit Activities.  Ability to meet tight deadlines. Ability to manage several priories simultaneously. Must be CAC ready to access SAP and program systems.
• Track and monitor all audit related system change requests in Service Now and update as needed.
• Ability to successfully collaborate with multiple stakeholders in a cross-functional environment to accomplish Audit Readiness objectives.
• Ability to run SAP Security/SUIM queries to analyze user and system data for audit purposes and continuous monitoring.
• Ability to generate, review, and follow up on exceptions for SAP Firefighter Access or elevated system access privileges.
• Experience with SAP GRC to analyze Firefighter history usage.
• Familiarity with SAP tables and queries to generate user data for role inquires, SOD analysis or problem solving.
• Ability to review SOD and CA reports for exceptions and to make recommendations to remediate SOD conflicts.
• Solid understanding of SAP Security and User ID provisioning procedures Understand of authentication concepts.
• Ability to diagnose SAP access and authorization issues and provide corrective recommendations.
• Understand where to obtain various sources of audit information within an SAP environment.
• Conduct SAP Role Reaffirmation process and other technical assessments to support customer requirements.
• Manage, support, and coordinate privileged access request process. Maintain documentation of approvals, AUPs, training materials.
• Provide governance monitoring of privileged access review. Document reviews, approvals, and maintenance of documentation for Audit Readiness purposes.
• Able to accomplish deliverables involving complex and highly analytical tasks.
• Able to create detailed procedures for SAP Security and Compliance activities.

Qualifications

• Bachelor’s degree required in Business Administration, Computer Science, or comparable degree.
• 5+ years’ experience with internal or external audits.
• SAP Security experience-knowledge of role and position-based security Information Systems Security certifications are a plus Experience with SAP GRC Access tools
• Experience using Microsoft Office (Excel)
• Excellent written and oral communications skills
• Active DoD SECRET clearance.