GRC Analyst Lead

Lennox International • Richardson, TX

1d • $104,000 - $136,500

About The Position

Under limited supervision, serve as a technical and functional bridge between IT and business partners. Perform security and compliance assessments as well as evolving SAP GRC (Governance Risk Compliance) environment. Ensure that GRC rulesets accurately reflect business processes and that risks are mitigated with the appropriate controls.

Requirements

• Requires a Bachelor’s degree in Management Information Systems, Accounting/Finance, or a related technical field or an equivalent combination of education and experience.
• Requires at least 5 years related experience.
• Requires at least 3 years of direct experience in SAP GRC and/or SAP Security.
• Strong, hands-on experience with SAP GRC (Access Control).
• A technical understanding of SAP authorization objects and T-codes related to the EWM, TML, FI, MM, GTS, and HR modules.
• Ability to analyze complex business systems and identify risks and control weaknesses.
• Strong interpersonal skills to explain to business owners why a specific access request may be inappropriate and how to remediate the issue.
• Ability to mentor junior team members and build effective partnerships across IT and business teams.

Nice To Haves

• Experience with procurement systems (Ariba) is a plus.

Responsibilities

• Support the GRC Manager on projects related to ruleset architecture, Segregation of Duties (SoD) conflicts, and SAP GRC reporting.
• Lead the review and modification of the GRC ruleset to ensure alignment with evolving business processes.
• Enhance ruleset permissions at the object and field level to reduce false positives and capture missing risks.
• Review and adjudicate access requests to determine if requested roles are appropriate while adhering to the principle of least privilege.
• Perform deep-dive reviews of mitigating controls to ensure they are properly designed and effectively mitigate the specific risks they are assigned to cover.
• Identify and assess potential risks within IT projects and system enhancements, ensuring appropriate controls are built in.
• Gather and report data to support internal/external auditors and compliance partners.

Benefits

• tuition reimbursement
• medical, dental, and vision insurance
• prescription drug coverage
• 401(k) retirement plan
• short-term disability insurance
• 8 weeks paid birthing leave
• 2 weeks paid bonding leave
• life and long-term disability insurance
• 12 days paid time off
• 2 paid well-being days
• 1 paid volunteer day
• 12 paid holidays
• 3 floating holidays per year

What This Job Offers

• Job Type: Full-time
• Career Level: Senior