Senior SAP Security Analyst

Senior SAP Security Analyst

Company:

The Boeing Company

The Boeing Company is looking for a Senior SAP Security Analyst to join the team in Seal Beach, CA; Huntington Beach, CA; El Segundo, CA; Long Beach, CA; Seattle, WA; Kent, WA; Renton, WA; Everett, WA; Miami, FL; Hazelwood, MO; or Berkeley, MO.

We are seeking an experienced SAP specialist with deep SAP security technical skills and proven leadership, specifically within Aerospace & Defense (A&D) environments. The ideal candidate is a hands-on technical leader who will drive the evolution of our SAP Security program across complex, regulated SAP landscapes supporting manufacturing, Maintenance, Repair, and Operations (MRO), supply chain, defense contracting, and commercial aviation operations.

You will bring strong expertise in SAP Governance, Risk, and Compliance (SAP GRC), Role-Based Access Control (RBAC), and Attribute-Based Access Control (ABAC), as well as user lifecycle management and identity provisioning. Experience implementing SAP security in large organizations and working within SAP S/4 landscapes is essential, along with a proven track record of leading cross-functional teams and enterprise security initiatives across multiple business units.

In this role within the SAP S/4 Center of Excellence (COE), you will design, implement, and manage security controls to enhance the security posture, improve operational efficiency, and ensure regulatory compliance. You will analyze and resolve complex technical issues, standardize and document daily operating procedures and quick reference guides, and collaborate closely with technical resources and business partners to support security objectives.

You will support your team with expertise in analyzing and resolving complex technical issues, standardizing and documenting daily operating procedures and quick reference guides, participating in identifying development opportunities for Security Analysts.

Position Responsibilities:

• Lead design, implementation, and operation of SAP security controls across SAP Enterprise Resource Planning Central Component (ECC) and S/4HANA environments, including role design, role mining, and role optimization

• Provide expert guidance on RBAC and ABAC configuration for S/4HANA, Master Data Governance (MDG), SAP Global Trade Services (GTS), Business Warehouse (BW), HANA Database environments, and custom ABAP developments, review transportation and change controls for security impact

• Ensure SAP RBAC and ABAC support export control data handling International Trade Arms and Regulations (ITAR), U.S. Export Administration Regulations (EAR), United Kingdom Ministry of Defense regulations (UK MOD) and program-specific access restrictions

• Assist with attestation and evidence collection for internal audit, external auditors, Global Trade Compliance (GTC) reviews, and Sarbanes-Oxley Act (SOX) compliance reviews

• Understand legal privacy requirements managing Personally Identifiable Information (PII) and General Data Protection Regulation (GDPR) requirements and how to apply appropriate security controls

• Understand enterprise policies and processes and apply to SAP application RBAC and ABAC controls

• Enforce, and continuously improve Segregation of Duties (SoD) rules and remediate violations in partnership with business process owners

• Implement and manage privileged access controls, including privileged account discovery, monitoring, and logging

• Drive security risk assessments, perform access reviews and attestations, and report compliance status to internal audit and external regulators

• Stay current with SAP security best practices and help deploy roadmap items such as S/4HANA security hardening, Fiori security, and cloud or Software as a Service (SaaS) integration

• Mentor, coach, and identify development opportunities for a team of SAP security analysts

• Support incident response, investigate potential access breaches, and lead post-incident reviews

• Document processes, update runbooks, standardize security implementation methodology and develop implementation playbook, and develop quick reference guides for user self-service

Basic Qualifications (Required Skills/Experience):

• 5 + years of experience with SAP Security and/or SAP GRC

• 5+ years of experience in Role Based Access Control (RBAC) leveraging Panorama

• 5+ years of experience with SAP S/4HANA, and ERP operational processes

• 5+ years of Fiori experience

• 5+ years of experience in SOX, SOX audits, process improvements, and policy creation

• 5+ years of experience with cross-fu