Sr Analyst IT Security

Benefits

Additional Information

Job Summary Job Description We are seeking a highly skilled Sr. SAP Governance Analyst. This person will play a critical role in ensuring SAP compliance with regulatory requirements (e.g., SOX), company policies, and industry best practices. This position is responsible for supporting the development of SAP standards and operating procedures, designing, executing, and enforcing SAP IT internal controls (e.g., user access reviews, change reviews), training stakeholders on SAP compliance requirements, developing SAP governance strategies, managing risks, and improving operational efficiencies. The ideal candidate will be proactive, hands-on, and results oriented. MAJOR RESPONSIBILITIES - Develop and implement SAP policies, procedures, and guidelines, review exception requests, and oversee enforcement. - Design and govern role-based access control strategies for SAP systems; provide clear guidance for the SAP Security team. Define and propose data protection and privacy protocols such as encryption and masking. - Develop and maintain SAP internal controls environment documentation (e.g., process flows, narratives, control matrices, segregation of duties rulesets, role security matrices, etc.). - Monitor compliance to the end-to-end SAP user access lifecycle, including role assignment, segregation of duties conflict management, approvals, periodic access reviews, and deprovisioning as well as the elevated access management process. Propose process improvements and security enhancements. Execute controls. - Design, implement, and monitor SAP system adherence to software development lifecycle, job monitoring, and other applicable SAP controls. Ensure secure system parameters are defined and configured. - Assist with the development of corrective action plans to address SAP internal control deficiencies and the timely remediation of the deficiencies. - Define and enforce SAP role design and maintenance, including role and authorization object creation, revision, testing, and disablement. - Respond to SAP Security-related incidents. - Maintain segregation of duties ruleset in accordance with business process requirements and enforce rules that prevent conflicts of interest. - Mature the overall SAP controls environment; drive towards automation and continuous monitoring practices. - Prepare for and facilitate internal and external audits, gathering and providing required documentation and evidence of compliance. - Provide training and guidance regarding SAP policies, control procedures, and tools to control owners, role owners/access approvers, and system end users. - Collaborate with cross-functional teams to develop, implement, and remediate SAP processes and controls. Develop and manage relationships with IT and cross-functional stakeholders. Work with cross-functional teams and SAP architects to embed security into all SAP projects. - Track and manage key performance indicators; generate dashboards and reports needed to effectively communicate SAP security risks, segregation of duties conflicts, and other compliance metrics. - Take ownership of projects, ensuring their successful planning, budgeting, execution, and completion. MINIMUM JOB REQUIREMENTS Education - Bachelor's degree in Computer Science, Information Technology, Information Security, Engineering, Accounting, or related field, or equivalent work experience. Certification / Licensure Work Experience: - Total 5 + Years and 3+ or more years of experience in Internal Controls, SAP Security, SAP Administration, IT Internal Audit, and/or Information Security - Must have experience working in a large and complex SAP environment - Must have experience with Sarbanes-Oxley compliance Knowledge / Skills / Abilities - Familiarity with using modern GRC or other workflow tools to effectively manage SAP controls execution - In-depth understanding of IT internal controls (i.e., Change Management, Access, IT Operations, segregation of duties rulesets, SDLC) - Experience developing and maintaining internal controls documentation (e.g., risk control matrices, narratives, process flows, etc.) - Strong written and verbal skills, including a demonstrated ability to translate complex or technical information into concepts that are easily understood - Strong analytical, problem solving, and critical thinking skills, including the ability to anticipate issues and to design appropriate solutions - Excellent teamwork skills - Detail and deadline oriented, with the ability to manage multiple tasks and priorities simultaneously with limited supervision - Proficient with Microsoft Office Suite (Word, Excel, PowerPoint, SharePoint, Visio) About Medline India: Medline India was setup in 2010 in Pune, primarily as an offshore Development centre and to augment resources for Medline Industries LP headquartered in Chicago, USA. We are a 1500+ strong and growing team of technology, finance & and business support professionals who support our businesses worldwide towards a mission