SAP Security Analyst

Corning • Charlotte, NC

2d • $63,456 - $87,252 • Onsite

About The Position

The SAP Security Analyst is responsible for administering and maintaining user access within Corning's SAP ECC 6.0 environment. This role serves as a critical control point for ensuring that user access is provisioned, modified, and removed in accordance with Corning security policies, Segregation of Duties (SoD) requirements, internal controls, and Sarbanes-Oxley (SOX) compliance obligations. The analyst works closely with business users, managers, auditors, IT support teams, and security administrators to ensure appropriate access is granted based on business need while protecting Corning systems and data assets.

Requirements

• Bachelor’s degree in information systems, Computer Science, Business, Accounting, Cybersecurity, or a related discipline desired.
• Equivalent combination of education and experience will be considered.
• 2–5 years of experience supporting SAP security administration (or related system) preferred.
• Experience with SAP ECC 6.0 user and role management (or related system) desired.
• Experience working with IT service management tools such as ServiceNow desired.
• Experience supporting compliance-driven environments.
• Understanding of SAP authorization concepts.
• Knowledge of user provisioning and deprovisioning processes.
• Knowledge of Segregation of Duties (SoD) concepts.
• Understanding of internal controls and audit requirements.
• Strong analytical and problem-solving skills.
• Strong attention to detail and commitment to data accuracy.
• Ability to manage multiple priorities and meet deadlines.
• Strong written and verbal communication skills.
• Ability to work effectively with business and technical stakeholders globally.

Nice To Haves

• Experience with Security Weaver or comparable SAP security governance tools.
• Experience supporting SOX-regulated environments.
• Experience with SAP GRC Access Control.
• Familiarity with Identity and Access Management (IAM) solutions.
• Experience supporting global SAP environments.
• Knowledge of SAP S/4HANA security concepts.
• Security-related certifications such as SAP Security, CISSP, CISM, or comparable credentials.

Responsibilities

• Create, modify, lock, unlock, and delete SAP user accounts across ECC environments.
• Process access requests, transfers, and terminations in accordance with defined approval workflows.
• Ensure all user access is supported by appropriate approvals (e.g., supervisor and role owner approvals).
• Maintain accuracy and completeness of user master data.
• Support manual and automated provisioning processes (e.g., ZCAT, SU01).
• Assign, modify, and remove SAP roles based on approved business requirements.
• Validate all access requests against approved SAP role design and authorization concept.
• Ensure access aligns to job function and business necessity.
• Support role rationalization and cleanup efforts to reduce unnecessary access.
• Enforce least-privilege access principles across all assignments.
• Execute Segregation of Duties (SoD) checks during role assignment and user provisioning.
• Utilize tools such as SecurityWeaver to identify, monitor, and mitigate SoD conflicts.
• Support periodic access reviews, including quarterly and annual certification activities.
• Ensure compliance with SAP security policies, internal controls, and audit requirements.
• Maintain documentation and audit evidence for access provisioning and changes.
• Ensure all access requests follow defined processes and require appropriate approvals.
• Support management of critical (Cat3) roles, including approvals and monitoring.
• Assist in enforcing restrictions on high-risk transactions and system-wide access.
• Participate in enforcing policies governing privileged access and emergency access use.
• Investigate and resolve user access issues and authorization errors.
• Support business users with access-related inquiries.
• Coordinate with functional teams to resolve role-related issues.
• Process ServiceNow SAP security tickets within defined SLAs.
• Support onboarding, offboarding, and organizational changes impacting access.
• Participate in system refreshes, migrations, and project cutover support.
• Maintain and update SAP security work instructions, procedures, and documentation.
• Identify opportunities to improve efficiency, automation, and control effectiveness.
• Support continuous improvement initiatives within SAP security processes.

Benefits

• Company-wide bonuses and long-term incentives align with key business results and ensure you are rewarded when the company performs well.
• 100% company-paid pension benefit with fixed contributions that grow throughout your career.
• Matching contributions to your 401(k) savings plan.
• Corning’s total contributions to your retirement accounts can reach between 7% and 12% of your pay, depending on your age and years of service.
• Medical, dental, vision, paid parental leave, family building support, fitness, company-paid life insurance, disability, disease management programs, paid time off, and an Employee Assistance Program (EAP) to support you and your family.
• Recognition program to celebrate successes and reward colleagues who make exceptional contributions.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level