IT Compliance Analyst

SSR Mining Inc.•Denver, CO

1d•$80,000 - $105,000•Hybrid

About The Position

Reporting to the Manager, IT Governance & Architecture, the IT Compliance Analyst is responsible for securing user access across SAP systems, ensuring compliance with regulatory requirements such as SOX, ICFR, and internal corporate policies. This role focuses on SAP access governance, Segregation of Duties (SoD) risk management, SAP security controls, and supporting audits related to SAP environments. This role is critical in preventing fraud, ensuring accurate financial reporting, enabling audit readiness, and maintaining secure user access across the organization. This is a hybrid role requiring 2 days a week in office.

Requirements

2–5+ years of experience in SAP Security, SAP GRC, Identity Governance, or IT compliance.
Strong understanding of SAP authorization concepts (roles, profiles, catalogs)
Knowledge of compliance frameworks (SOX, ICFR).
Experience analyzing and remediating Segregation of Duties issues.
Strong documentation, analysis, and communication skills.
Strong in English both written and verbal.

Nice To Haves

Experience with SAP S/4HANA and Fiori security.
Strong understanding of business processes (P2P, O2C, FICO, MM, PM).
Operational business background with desire for SAP security
Mining industry experience is an asset.
Experience with Soterion GRC is an asset.
SharePoint and SharePoint Solutions and ITSM tools highly desired

Responsibilities

SAP Security Administration & Governance Manage SAP user provisioning, role assignments, license impacts, and deprovisioning across SAP landscapes (S/4HANA, BDC, SAC).
Support SAP authorization concepts aligned to least privilege and role-based access control (RBAC).
Initiate quarterly User Access Reviews (UARs) for SAP and support business owners during access recertifications.
Support role design and redesign initiatives for ongoing SAP projects and upgrades.
Review high-risk access requests and escalate concerns to leadership when necessary.
Segregation of Duties & Risk Management Monitor, analyze, and remediate SoD violations using Soterion.
Recommend role redesign, mitigating controls, and access adjustments to reduce SoD risk.
Assist in maintaining rule sets, risk libraries, and mitigating control documentation.
Conduct SAP access risk assessments and impact analysis for new roles and access requests.
Compliance & Audit Support Support internal and external audits (SOX, ICFR) by providing evidence and documentation.
Track remediation efforts and ensure timely closure of audit findings.