Job Summary:
The Senior SAP Security Analyst is responsible for designing, implementing, and maintaining industry-leading SAP security architecture and controls. This role works collaboratively with IT and business teams to safeguard SAP business systems, ensure appropriate access governance, and support secure, compliant operations across the SAP landscape.
The Senior SAP Security Analyst also serves as a subject matter expert, providing guidance, knowledge transfer, and training to IT and business stakeholders on SAP security best practices, access controls, and compliance requirements.
Primary Duties and Responsibilities
- Manage daily SAP security operations while supporting project delivery and strategic initiatives.
- Prioritize, coordinate, and assign tasks related to change management, incident management, and access support activities.
- Collaborate with cross-functional IT teams to promote effective communication, issue resolution, and alignment across projects.
- Deploy, monitor, test, and optimize security and identity access management best practices within the SAP environment.
- Own and support SAP cybersecurity audit controls, identity policy compliance, and operational efficiency improvements across identity environments.
- Partner with security support teams to streamline daily monitoring activities and evaluate the effectiveness of operational processes.
- Contribute to and support SAP security, identity management, and access governance functions across operational and project workstreams.
- Prepare required reports and ensure policies and procedures are maintained to support SOX compliance requirements.
- Gather business security requirements to manage and control SAP data access and network authorization requirements.
- Research, recommend, and develop security and risk mitigation solutions that strengthen the organization’s SAP control environment.
- Ensure SAP accounts are disabled, reviewed, and cleaned up in accordance with established policies and procedures.
- Ensure audit requirements are met for all SAP security access and related control activities.
- Maintain ownership of assigned security incidents, including timely communication, documentation, and resolution tracking.
- Create SAP user accounts and assign approved access in accordance with business requirements and access governance standards.
- Perform user maintenance activities across systems managed by Information Technology.
- Maintain SAP rulebook and mitigating controls in partnership with business stakeholders.
- Update and maintain documentation as changes are made to SAP groups, roles, and access structures.
- Work closely with Enterprise Architecture teams to define and maintain security-related technology standards.
- Understand relevant underlying technologies and applications to guide the design, development, and implementation of technology requirements.
- Stay current on emerging technologies, practices, and policies that may enhance capabilities, service quality, and the company’s security posture.
Education and Experience Profile
- Bachelor’s or master’s degree in computer science, Information Security, or a related field.
- Minimum of 5 years of experience in SAP Security Architecture, with a strong focus on SAP ECC.
- Strong understanding of SAP security concepts, role design, GRC, and compliance management.
- Experience with SAP HANA, S/4HANA, and Fiori security models is highly desirable.
- Familiarity with industry standards and regulations related to information security and data protection, including ISO 27001, GDPR, and SOX.
- SAP Security and/or GRC certifications are preferred.
Required Skills
- Hands-on working knowledge of SAP IDM and/or other identity and access management solutions.
- Advanced Security experience with SAP GRC and/or related SAP tools, including SAP ECC, MDG, and Solution Manager.
- Experience supporting complex SAP troubleshooting, mitigation, and resolution activities in a global organization.
- Strong analytical, problem-solving, and critical-thinking skills.
- Excellent communication, collaboration, and interpersonal skills.
- Ability to work effectively in a team environment and engage stakeholders across multiple functional areas.
- Strong project management skills with the ability to manage multiple priorities in a fast-paced environment.
- Detail-oriented with a demonstrated commitment to quality, accuracy, and high standards.
Work Environment:
- Work is performed in a standard office environment with a hybrid work model.
- Work hours may need to accommodate global time zones, operational needs, and team meetings as required.
We are the ASSA ABLOY Group
Our people have made us the global leader in access solutions. In return, we open doors for them wherever they go. With nearly 63,000 colleagues in more than 70 different countries, we help billions of people experience a more open world. Our innovations make all sorts of spaces – physical and virtual – safer, more secure, and easier to access.
As an employer, we value results – not titles, or backgrounds. We empower our people to build their career around their aspirations and our ambitions – supporting them with regular feedback, training, and development opportunities. Our colleagues think broadly about where they can make the most impact, and we encourage them to grow their role locally, regionally, or even internationally.
As we welcome new people on board, it’s important to us to have diverse, inclusive teams, and we value different perspectives and experiences.
