SAP Security Analyst

 

 

Job ID:  519291

Exempt

 

Oldcastle Infrastructure™, a CRH company, is the leading provider of utility infrastructure solutions for the water, energy, and communications markets throughout North America. We’re more than just a manufacturer of precast concrete, polymer concrete, or plastic products. We’re a trusted and strategic partner to engineers, contractors, distributors, specifiers, and more. With our network of more than 80 manufacturing facilities and more than 4,000 employees, we’re leading the industry with innovation and a safety-first mindset.

 

Oldcastle Infrastructure - Built For Life from Oldcastle Infrastructure on Vimeo.

 

 

 

Job Summary

 

Oldcastle Infrastructure Inc. (OII) is looking for SAP Security Analyst. He/She will be responsible for architecting, implementing, and maintaining SAP Security access and user access controls for all the SAP instances of the company. This position will work closely with the SAP functional teams and the system integration partner in architecting, designing, implementing, and governing the SAP security framework for a large business process transformation program involving an S4 implementation. The analyst will also work with the Internal Audit, Risk, and Compliance teams to ensure the internal and external audit requirements are met.

 

Job Location

 

• This role will work hybrid out of our office in the Sandy Springs, GA area. 

 

Job Responsibilities

 

• Design, manage and deploy a global SAP security model.
• Maintain and enhance the process for SAP security role maintenance and administration.
• Develop and maintain the centralized GRC rule sets, workflows, and approvers for user provisioning /de-provisioning, authentication/authorization/emergency access, and access recertification based on business needs, industry best practices, and regulatory requirements.
• Review the business blueprint, functional specifications for SAP security role development, authorization, and user acceptance test plans and participate in cutover activities during go-live phases.
• Design, Implement, document, and maintain IT general controls relative to new and modified business and IT processes.
• Administration and provisioning of security roles for SAP and non-SAP applications that integrate with the SAP instances.
• Conduct detailed analysis sessions with end-users and business SMEs.
• Ensure that the security roles are appropriately assigned to users and tested thoroughly before deployment.
• Evaluate business risks associated with security role design, implement appropriate controls to address those risks, and provide recommendations on ways to simplify and streamline the security design.
• Identify role owners and automate the role and user provisioning processes.
• Perform user access review and provide analysis for internal and external auditors as required.
• Work as a member of a project team to coordinate the development and determine project scope and limitations
• Monitor, report, and remediate elevated role provisioning to ensure unauthorized access removal for live production
• Ensure role provisioning and user access privileges comply with company security policies and SOX regulations.

 

Job Requirements

 

• 7+ years of experience in application security
• Thorough understanding of the SAP Authorization concept and the role-based access control model.
• Knowledge of information security frameworks, methodologies, policies, standards, and best practices.
• Knowledge of identity and access management tools and processes
• Thorough understanding of SoX ITGC controls
• Knowledge of IT risk management – NIST RMF
• Ability to assess business role requirements, design authorization roles, and manage supporting authorizations.
• Ability to speak to infrastructure-level security concerns and to work with the technical team to ensure such concerns are addressed.
• Ability to provi