SAP Application Security Analyst

State of North Carolina•Wake Forest, NC

3d•$87,617 - $131,426•Onsite

About The Position

The Office of the State Controller (OSC) is seeking an IT Security & Compliance Specialist II to join their Information Technology division. This role is crucial for implementing and maintaining the security aspects of the state's SAP Integrated HR/Payroll System, BI/BOBJ Reporting, NC Financial Systems, and Go Anywhere MFT systems. The successful candidate will act as a gatekeeper for access to system functionalities, implement role-to-position and structural authorization concepts, and process access requests for various state agencies and universities. This position reports to the Applications Systems Manager and will be responsible for administering application security for Oracle Fusion NC Financial System and the SAP HR/Payroll System, as well as mentoring other security team members. The role also involves leading security projects during agency reorganizations or new agency startups.

Requirements

Bachelor’s degree in computer science or a related IT field or closely related field from an appropriately accredited institution and two years of progressive experience in IT Security or closely related area; or Associate degree in computer science or a related IT field or closely related area from an appropriately accredited institution and three years of progressive experience in IT security or closely related area; or an equivalent combination of education and experience.
Thorough knowledge of HR / Payroll Systems, Financial and budgetary methods and operations/practices.
Ability to comprehend, analyze and interpret organizational issues/procedures to make alterations in existing systems that support the organization.
Ability to prepare detailed and comprehensive reports and to present information clearly and concisely.
Thorough knowledge of and experience with operations/systems administration analysis and automation programming/scripting, employing complex and specialized tools/utilities, techniques, and methodologies.
Detailed understanding of technical issues to design architecture for emerging and stable technologies.
Thorough knowledge of security rules and how to grant/deny access based on users or groups.
Thorough knowledge of how data is accessed within a database and how access can be controlled.
Ability to provide and communicate security knowledge and information to other managers and agency data owners on a regular basis.
Thorough knowledge of technology architecture in a multi-layered environment, two-factor authentication, active directory integration, SAP proprietary roles and authorization objects as well as Oracle Fusion custom job roles and duty roles in a cloud-based environment.
Ability to manage statewide moderate to complex projects that can have significant impact on NC Employees in a fast-paced environment.
Knowledge of designing, developing, configuring, documenting, prototyping, testing, and implementing security protocols across multiple systems or platforms.
Strong analytical skills and able to make proactive decisions regarding technical modifications to prevent future problems, assessing all viable options and weighing all potential consequences.
Thorough knowledge of security rules and how to grant/deny access based on users or groups.

Responsibilities

Maintain and support application security for the Oracle Fusion NC Financial System using industry best practices for Oracle Fusion Cloud.
Maintain and support SAP HR/Payroll System security following SAP and industry standards.
Adhere to statewide security documentation, policies, and procedures established by data owners.
Process daily security requests submitted by security administrators across 60 agencies and universities via the Ivanti ticketing system.
Apply SAP best practices for structural authorizations to ensure system efficiency and performance.
Coordinate implementation of production role changes, new user accounts, and account enhancements.
Maintain and protect service accounts used for batch and Boomi processing, ensuring password security and account integrity.
Support technical and application security for tables, reports, programs, and interfaces in accordance with industry and OSC policy requirements.
Maintain and support four SAP HR/Payroll development and training landscapes and fourteen Oracle Fusion NC Financial System development and training instances.
Manage production support staff accounts in Testing/QA environments and over 300 training accounts across multiple training clients.
Participate in requirements gathering, design, configuration, and testing activities for SAP security across multiple platforms.
Research authorization objects, structural authorizations, and role enhancements required for projects.
Establish test accounts for Oracle Fusion and SAP systems as needed.
Research and analyze reported security issues.
Evaluate and design new roles or enhancements to existing roles.
Identify potential performance issues and segregation of duties (SoD) conflicts; advise functional and technical teams on remediation.
Conduct quarterly application security reviews for OSC.
Generate and distribute manager-level reports for sign-off.
Assist 60 agencies and universities with quarterly reviews to ensure compliance with statewide security standards under G.S. 147 33.110.
Support AAC monitoring jobs and processes.
Produce quarterly SoD conflict reports for agency and university Oracle NCFS security administrators, guiding remediation or risk acceptance.
Develop and maintain comprehensive security documentation and procedures for OSC’s Oracle Fusion NCFS and SAP HR/Payroll Systems.
Support cross-training and audit readiness through clear, accurate technical documentation.