ERP Security and GRC Analyst IV - United States (Remote)

Working across the globe, V2X builds smart solutions designed to integrate physical and digital infrastructure from base to battlefield. We bring 120 years of successful mission support to improve security, streamline logistics, and enhance readiness. Aligned around a shared purpose, our $3.9B company and 16,000 people work alongside our clients, here and abroad, to tackle their most complex challenges with integrity, respect, responsibility, and professionalism.

The SAP GRC Security Analyst is responsible for the designing, implementing, and maintaining SAP security roles, ensuring compliance with governance, risk, and compliance (GRC) requirements, and supporting audit and risk mitigation efforts This role requires deep expertise in SAP security, governance, risk, and compliance (GRC), with a strong focus on access management, risk analysis, and audit compliance. The SAP GRC Security Analyst will collaborate with cross-functional teams to ensure robust security controls, mitigate risks, and enhance SAP security strategies.

Job Responsibilities:

SAP Security Administration & Role Management:

• Collaborate on the design, development, and maintenance of SAP security roles across multiple SAP platforms, including S/4HANA, ECC, BW, Fiori, BTP, and Ariba.
• Manage role-based access control (RBAC), ensuring proper segregation of duties (SoD) and least privilege principles.
• Perform user provisioning, role modifications, and de-provisioning while ensuring compliance with security policies.
• Evaluate SAP Fiori app security and manage Fiori catalog, group, and tile access control.
• Collaborate with SAP functional teams to define secure role structures for different business processes.

SAP GRC Access Control & Compliance Management:

• Implement and manage SAP GRC Access Control modules, including:
• Access Risk Analysis (ARA): Monitor and mitigate Segregation of Duties (SoD) conflicts using SAP GRC tools.
• Work closely with audit teams to address security and compliance findings.
• Access Request Management (ARM): Automating user provisioning and approval workflows.
• Business Role Management (BRM): Standardizing role design and governance.
• Conduct periodic user access reviews and SoD risk assessments to maintain compliance.
• Develop and enforce security policies, controls, and best practices for SAP access management.
• Ensure SAP security compliance with SOX, GDPR, NIST, ISO 27001, and other regulatory frameworks.
• Act as a liaison with internal/external auditors for SAP security audits, risk assessments, and remediation.

Security Monitoring & Incident Response:

• Monitor SAP security logs and alerts to detect and respond to unauthorized access attempts or security breaches.
• Investigate and resolve security incidents, access violations, and system vulnerabilities related to SAP.
• Risk Mitigation & Continuous Improvement
• Drive efforts to reduce security risks, including automating risk analysis and improving access management processes.
• Provide recommendations for enhancing SAP security architecture and implementing advanced security solutions.
• Stay updated on SAP security trends, emerging threats, and industry best practices.
• Evaluate and implement new security tools, technologies, and strategies to enhance SAP security posture.

Training, Documentation & Collaboration:

• Conduct training and awareness sessions on SAP security risks and role-based access management for end.
• Work closely with SAP Basis, functional teams, and business stakeholders to ensure seamless security integration.
• Participate in SAP security enhancement projects, ensuring timely delivery and alignment with business goals.
• Maintain Comprehensive documentation of SAP system configurations, landscape, procedures, and best practices.
  • Regularly review and update documentation to reflect changes in technology, processes, and procedures
• Foster a collaborative and supportive work environment where innovation, as well as continuous learning and improvements, are encouraged

Qualifications:

Education:

• Bachelor's degree from an accredited university or college with a minimum of 6 years professional experience OR associate degree with a minimum of 8 years of professional experience OR High School diploma with a minimum of 10 years of professional experience

Experience:

• Minimum 6+ years of professional experience in SAP security administration and SAP GRC Access Control management.
• Strong expertise in SAP role design, SoD management, and access provisioning
• Hands-on experience with SAP GRC Acces