IT SAP Security Analyst

Job Description:

Reporting to the IT Manager SAP Administration and Security, the primary responsibility of the IT SAP Security Analyst is to support all SAP security functions in Bristow’s SAP Ecosystem, including SAP Concur. The position will focus on creating technology visions, delivering technology-enabled business outcomes such as ensuring compliance with SAP security controls and procedures, improving business experiences, accelerating operational efficiency, delivering robust, scalable, and standardizing solutions in accordance with global business requirements and industry best practices.

The position holder will work closely with the IT Team and IT stakeholders, providing application and system security support for the company’s business systems. The individual will also oversee SAP security development, planning, and release management of all IT SAP solutions, providing improved flexibility, control, and efficiency to the company.

The IT SAP Security Analyst will also evaluate alternative solutions; implement standard technologies and processes and be responsible for continuously improving our SAP Security solutions. The individual will plan, coordinate, and work with external service providers to ensure the delivery of agreed service levels and quality.

RESPONSIBILITIES:

• Administer SAP GRC (Governance Risk & Compliance) Access Controls 12.0 SP 22
• Oversee and assist with ongoing maintenance of configuration within the SAP GRC application
• Analyze and understand current role and access restrictions from an audit perspective and synchronize with existing SAP GRC access control to provide a controlled and secure application environment
• Work with business users to resolve SAP application access issues
• Work with Internal and External Audit to make sure Audit requirements are met and remediate any identified gaps
• Work as a member of a project team to coordinate development and determine project scope and limitations
• Conduct detailed analysis sessions with end users and business stakeholders to capture business requirements or resolve access issues
• Comply with industry best practices around change management, user provisioning, and privileged access
• Monitor and perform SOX controls as they relate to SAP Security and GRC
• Review and diagnose Separation of Duties issues arising from SAP access requests
• Coordinate the synchronized delivery of new or changed roles with other changes implemented by the IT functional and technical teams
• Coordinate the completion of security role unit testing with SAP functional leads
• Create formal user access management and GRC process documentation, including but not limited to process flows, narratives, procedure documents
• Administer SAP User authorization, including account creation, role assignments, and GRC SOD analysis
• Monitor and perform SOX controls as they relate to SAP Security and GRC
• Create data extracts and reports from systems based on requirements
• Practice strict adherence to security requirements
• Implement security policies, processes, audits, SOX, and SOD concepts
• Design and build security authorizations based on SOD standards and business requirements
• Participate in SAP audit discussions, questions and help resolve the SOD issues
• Work with IT teams and third-party service providers to design, develop and implement global systems and security processes
• Support on-going audits, providing analysis of reports, findings
• Assist with SAP projects as needed, providing risk assessment
• Communicate to technical and business partners regarding risks and potential controls to mitigate risks
• Participate in projects to provide a viewpoint on risk and risk mitigations
• Update and research recommendations for product and system improvements
• Drive process automation and replace manual operations to create efficiencies
• Solve or recommend solutions for complex issues and problems
• Work with offshore AMS SAP Security resources for support
• Work directly with software vendor for prompt resolution of any problems or emergencies
• Provide on-call application support for critical issues as needed
• Enable a high performing, self-organizing, dynamic team
• Provide appropriate issues escalation to the necessary levels as required
• Manage risks and issues proactively, including resources, costs, and systems, and recommend appropriate solutions

QUALIFICATIONS:

• Bachelor’s D