SAP Security Compliance Analyst

Description

Provide leadership, guidance, and oversight to ensure the implementation and consistent operation of an information security governance, security risk management and compliance program.
Oversee Information Technology policies and procedures follow all required laws, standards, and regulations.
Update and improve IT Security policies, standards and procedures at required intervals
Perform compliance assessments to decide if business systems are aligned with regulatory requirements, industry standards, and best practices and to information security policy, procedures, and standards.
Plan and perform annual IT risk assessments across company departments, business units and operational locations.
Collaborate with key stakeholders at all levels of the organization to confirm, verify and address audit findings, control deficiencies and remediation plans
Document, keep, report and articulate audit related information (i.e., scope, findings, recommendations, corrective action plans, and status) and documentation to compliance and business operations leadership.
Educate organizational teams on application security design and business role security
Maintenance of rule book for Symmetry GRC solution modules
Coordinate all aspects of regulatory audits (i.e., pre site deliverables, audits/assessments, on site visits and planning, written responses to audit reports)
Documents SAP Security design and administration processes, creates and updates operational guides, and monitors existing operational guides for consistency and completeness
Design and develop solutions for securing custom transactions, tables and programs
Participate on Segregation of Duties committee and provide security guidance and best practices
Performs role design, configuration, testing, and deployment within SAP application architecture
Demonstrates senior level technical competence for SAP Security Concepts, including understanding of data privacy concepts, compliance and GRC
Supports projects by translating functional security requirements into technical security role and authorization designs