SAP Security Administrator

Company / Location Information

A. O. Smith is a global leader applying innovative technologies and energy-efficient solutions to products manufactured and marketed worldwide. The company is one of the world’s leading manufacturers of residential and commercial water heating equipment and boilers, as well as a manufacturer of water treatment products for residential and light commercial applications. A. O. Smith is headquartered in Milwaukee, Wisconsin, with approximately 12,000 employees at operations in the United States, Canada, China, India, Mexico, the Netherlands, and the United Kingdom.

Located in our Nashville Metro Center office, just minutes from downtown with easy interstate access and free parking we have been recognized by The Tennessean as one of the top Nashville area Workplaces, we have programs in place to help our team members achieve their potential. When you join our team, you will receive rewards and recognition for your contributions, training, and professional development opportunities, as well as a variety of benefits to support you and your family's health, well-being, and financial future.

Primary Function

The IT Security Administrator - User Access is responsible for managing the user active directory accounts and permissions for A. O. Smith's computer systems and networks. The administrator is also responsible for administering access, creating business roles, and modifications within the SAP Landscape, which includes but is not limited to ECC, BW, TM, GRC, and Cloud Applications of SAP. The administrator will work closely with other functional teams to ensure user access processes are defined and compliant with SOX/IT General Controls. The administrator may also be responsible for resetting passwords, providing technical support to users, and ensuring that users comply with the A. O. Smith security policies and procedural processes. In addition to technical skills, the administrator should have strong problem-solving and communication abilities, as they will work closely with other IT staff and business users.

The administrator is responsible for managing the creation, modification, and removal of Business Roles, and brings extensive hands-on experience in GRC Access Controls solutions EAM, BRM, ARA, and ARM to effectively provide production support for the SAP Landscape, which includes but not limited to ECC, BW, TW, and Cloud Applications of SAP.  Works with IT Infrastructure & Operations, Information Security, and Audit teams to identify, track, and remediate Segregation of Duties (SOD) conflicts through defined procedural processes that are aligned with audit requirements.     

Responsibilities

• Manage user accounts and permissions: Creating and deleting user accounts, setting and modifying user permissions, and managing access to different systems and resources.
• Providing technical support: Responding to user inquiries and troubleshooting technical issues.
• Managing passwords: Resetting passwords for users and enforcing IT policies.
• Ensuring compliance with SOX and IT General Controls and security policies: Monitoring user activity and ensuring that users adhere to the A. O. Smith policies, standards, and procedures.
• Preserving governance: Creating & updating documentation on the process of managing user access to accounts and setting permissions.
• Provide assistance as subject matter expert on medium to large-sized IT projects and implementation initiatives.
• Support the development of IT Administrator compliance documentation to ensure A. O. Smith’s information technology systems and processes comply with relevant laws, regulations, and industry standards.

Qualifications

• Bachelor's degree in Information Technology, Computer Science, or at least 7 years experience with Associate’s Degree in Information Technology,
• At least 5 years equivalent work experience in Information Technology Systems as an Access Administrator  
• Required - A minimum of 3 years experience in SAP ECC, BW, TM, GRC, or S4/HANA ERP environment
• Demonstrated understanding of information technology systems, applications, user provisioning rights, policies, standards, industry best practice requirements, including but not limited to: privileged access, audit and regulatory laws, governance, risks, and compliance.
• Strong organizational skill and be able to attend to and prioritize projects. <