IT CAM Analyst II

Smith & Wesson Brands, Inc.•Maryville, TN

2d•Onsite

About The Position

The IT-CAM Analyst II is responsible for managing and governing user access across the company's IT systems and applications, ensuring access controls are aligned with business needs, security standards, and compliance requirements. This role operates with a strong degree of independence, making risk-based access decisions and enforcing segregation-of-duties (SoD) controls, with a particular focus on SAP account and role administration. The Analyst II collaborates with business and IT teams to evaluate access needs, challenge requests where appropriate, and maintain the integrity of access controls, while also supporting access governance across a broader portfolio of non-SAP business applications. This is an experienced-level position, well suited to a candidate with solid, hands-on SAP access and security experience who is ready to take on meaningful ownership, including active participation in audit support and process improvement initiatives. Onsite/non-remote. This is an individual-contributor role reporting to the Senior Manager over IT-CAM, working collaboratively alongside the current IT-CAM Analyst. This role does not have direct reports or supervisory responsibilities.

Requirements

3+ years of relevant IT experience, including at least 2 years of hands-on experience with SAP security, SAP access administration, or SAP authorization support (required).
Experience in environments with structured access controls and audit requirements is strongly preferred.
Strong understanding of access management principles and security best practices.
Working knowledge of segregation-of-duties (SoD) concepts.
Experience with SAP roles, T-code management, and role/authorization change management.
Experience with IT service management tools and ticketing systems.
Strong analytical and problem-solving skills with the ability to evaluate risk.
Effective communication skills, with the ability to work across technical and business teams.
Detail-oriented, with a strong focus on accuracy and accountability.
Ability to operate independently and manage competing priorities.
Confident in decision-making and enforcing policy standards.
Focused on process consistency, control integrity, and continuous improvement.
A genuine willingness to learn how current processes work before proposing changes to them.
A collaborative, team-oriented approach; comfortable working independently without needing to supervise others.

Nice To Haves

Deeper, broader SAP experience (including role design, change management, and access certification at scale) are strongly encouraged to apply and will be considered at the higher end of this role's range.

Responsibilities

Administer user access across a wide range of IT systems and applications, ensuring permissions align with company policies, security standards, and business requirements, with responsibility for reviewing and approving access requests within established control frameworks.
Enforce the principle of least privilege by evaluating, approving, and adjusting access to ensure users maintain only the minimal necessary permissions required to perform their roles.
Manage SAP user accounts and role assignments across production, development, and QA environments, including transaction code (T-code) access, ensuring appropriate alignment to job functions while preventing over-provisioning and access conflicts.
Support role and authorization change requests, including researching required access, testing changes, and coordinating them through the standard change process.
Collaborate with business units to assess and validate access requests, applying business context and security principles. Challenge requests when necessary to maintain compliance and control integrity.
Evaluate access requests and role changes for segregation-of-duties conflicts, apply sound risk-based judgment, and provide clear recommendations to mitigate identified risks.
Manage emergency and temporary elevated access, ensuring proper approval and time-bound assignment.
Support the company's recurring access-certification and audit-review processes, helping ensure access remains appropriate and well documented over time.
Own or assist with complex access requests across a variety of non-SAP business applications, partnering closely with the rest of the IT-CAM team.
Review and improve access management processes across systems, driving consistency, efficiency, and adherence to security and compliance standards.
Serve as a primary contact for access-related audit requests. Ensure timely, accurate, and complete delivery of documentation and evidence to support internal and external audit requirements, including SOX.
Investigate and resolve access-related issues, including complex or cross-system scenarios, while maintaining security and minimizing business disruption.