SAP Security Controls Senior Associate

RSM US LLP•Tampa, FL

8d•$85,100 - $161,700•Hybrid

About The Position

RSM’s Business Application Risk practice is seeking an experienced SAP security and controls specialist to join its fast-growing SAP risk transformation team. The role focuses on SAP automated controls and compliant security solutions. The Business Application Risk Solutions practice manages governance and regulatory risk related to security, controls, and data across the lifecycle of core business applications, from implementation through operations. Its services include implementation risk solutions, system integrity solutions, security and controls design and assessments, complex data analytics, GRC automation and implementation, security role design, security managed services, segregation of duties assessments, and intelligent control implementations. The ideal candidate has experience scoping and executing SAP security segregation-of-duties assessments and security role designs, as well as experience with business automated controls. The role requires client communication, engagement organization, and coordination with the engagement supervisor. RSM describes most roles as hybrid, with team members aligned to an office and meeting in person when appropriate for clients, teams, development, or relationship-building; some roles may be virtual or primarily on-site based on role requirements and business needs.

Requirements

Degree required.
2–4 years of experience working with SAP as a business analyst, IT auditor, or implementation architect.
Exposure to SAP functional automated controls and SAP security role architecture.
Experience performing IT audits or being the recipient of an audit, including ITGCs, security, and controls.
Experience on at least one SAP implementation.
Clear and concise communication skills, including the ability to tailor communication to different audiences.
Strong organization and ability to monitor engagement time and expenses.
Ability to provide client status updates, review deliverables, keep the engagement supervisor updated, and communicate client opportunities.
Ability to put forth additional effort to meet deadlines when necessary.
High energy, analytical ability, organization, innovative problem-solving, and critical-thinking skills.
Ability to communicate effectively with technical and non-technical audiences.
Strong business ethics and willingness to adhere to professional standards.

Nice To Haves

Experience with data analytics tools such as ACL or MS Access, including performing complex queries.
Experience as a team member on at least one SAP implementation.
Experience with other business applications.
Demonstrated knowledge of auditing SAP automated business controls.
2–3 years of professional experience in public accounting or relevant compliance industry experience relating to Sarbanes-Oxley (SOX) compliance or COBIT, NIST, or ISO frameworks.
Desire to obtain a certification such as CISA, PMP, CPA, or an SAP-related certification.

Responsibilities

Scope and execute SAP security segregation-of-duties assessments.
Design SAP security roles.
Work with SAP business automated controls and SAP functional automated controls.
Provide client status updates and communicate client opportunities.
Review deliverables and keep the engagement supervisor updated in a timely manner.
Monitor engagement time and expenses.
Prioritize multiple tasks, projects, and assignments and make additional effort to meet deadlines when necessary.