SAP Security Analyst

Corning•Charlotte, NC

4d•$63,456 - $87,252

About The Position

The SAP Security Analyst administers and maintains user access within Corning’s SAP ECC 6.0 environment. The role ensures that access is provisioned, modified, and removed in accordance with Corning security policies, Segregation of Duties (SoD) requirements, internal controls, and Sarbanes-Oxley (SOX) compliance obligations. The analyst works with business users, managers, auditors, IT support teams, and security administrators to grant appropriate access based on business need while protecting Corning’s systems and data. The position supports SAP account and role administration, access governance, compliance controls, user access reviews, troubleshooting, operational ticket processing, and documentation and process improvement. It also supports onboarding, offboarding, organizational changes, system refreshes, migrations, and project cutovers.

Requirements

A bachelor’s degree in information systems, computer science, business, accounting, cybersecurity, or a related discipline is desired; an equivalent combination of education and experience will be considered.
Two to five years of experience supporting SAP security administration or a related system is preferred.
Experience with SAP ECC 6.0 user and role management, or a related system, is desired.
Experience with IT service management tools such as ServiceNow is desired.
Experience supporting compliance-driven environments.
Understanding of SAP authorization concepts.
Knowledge of user provisioning and deprovisioning processes.
Knowledge of Segregation of Duties concepts.
Understanding of internal controls and audit requirements.
Strong analytical and problem-solving skills.
Strong attention to detail and commitment to data accuracy.
Ability to manage multiple priorities and meet deadlines.
Strong written and verbal communication skills.
Ability to work effectively with global business and technical stakeholders.

Nice To Haves

Experience with Security Weaver or comparable SAP security governance tools.
Experience supporting SOX-regulated environments.
Experience with SAP GRC Access Control.
Familiarity with Identity and Access Management solutions.
Experience supporting global SAP environments.
Knowledge of SAP S/4HANA security concepts.
Security-related certifications such as SAP Security, CISSP, CISM, or comparable credentials.

Responsibilities

Create, modify, lock, unlock, and delete SAP user accounts across ECC environments.
Process access requests, transfers, and terminations in accordance with approval workflows, and ensure appropriate approvals are documented.
Maintain accurate and complete user master data and support manual and automated provisioning processes, including ZCAT and SU01.
Assign, modify, and remove SAP roles based on approved business requirements; validate requests against the approved role design and authorization concept.
Ensure access aligns with job function and business necessity, support role rationalization and cleanup, and enforce least-privilege principles.
Perform Segregation of Duties checks during role assignment and provisioning, using tools such as SecurityWeaver to identify, monitor, and mitigate conflicts.
Support quarterly and annual access certifications and comply with SAP security policies, internal controls, and audit requirements.
Maintain documentation and audit evidence for access provisioning and changes.
Ensure access requests follow defined processes and have appropriate approvals; support management and monitoring of critical (Cat3) roles.
Assist in restricting high-risk transactions and system-wide access and participate in policies governing privileged and emergency access.
Investigate and resolve user access issues and authorization errors, respond to user inquiries, and coordinate with functional teams on role-related issues.
Process ServiceNow SAP security tickets within defined SLAs and support onboarding, offboarding, and organizational changes affecting access.
Participate in system refreshes, migrations, and project cutover support.
Maintain SAP security work instructions, procedures, and documentation, identify opportunities to improve efficiency, automation, and control effectiveness, and support continuous improvement initiatives.