SAP Security Lead Analyst

Moog•Buffalo, NY

6d•$110,000 - $140,000•Hybrid

About The Position

Moog is a performance culture that empowers people to achieve great things. Our people enjoy solving interesting technical challenges in a culture where everyone trusts each other to do the right thing. For you, working with us can mean deeper job satisfaction, better rewards, and a great quality of life inside and outside of work. Job Title : SAP Security Lead Analyst Reporting To: Architect, Chief Enterprise Work Schedule: Fully Remote or Hybrid if Local – Buffalo, NY Moog’s Corporate Group is looking for an SAP Security Lead Analyst to join our Enterprise Solutions Team. In this role, will be involved in the software development lifecycle of SAP Security for the MOOG ERP transform project. You will be responsible for driving, communicating, designing, implementing, and maintaining secure access to SAP systems across the organization while migrating & transitioning the future sites to the SAP system. This role will require you to partner with IT, internal audit, and business process owners to ensure that SAP environments remain secure, compliant, and aligned with business needs. You will need to work independently, and as a team, to lead & manage security design workshops providing SAP best practices, provide system demos, document the key decisions & system configuration while having hands-on in SAP system. You’ll play a key part in safeguarding sensitive and export-controlled data, reducing fraud and error risk, and supporting audits and regulatory compliance (such as SOX and other security frameworks), while still enabling fast, secure delivery on mission-critical programs. To qualify for the SAP Security Lead Analyst role, here is what we would expect you to bring to Moog…

Requirements

Typically, a bachelor’s degree from an accredited institution, preferably in technology or related fields.
Over five (5) years of experience in SAP Security, focusing on SAP Firori and Governance, Risk & Compliance.
At least three (3) lifecycle implementations in SAP S/4.
Excellent soft skills with focus on building relationships with colleagues and partners.
Good team and communication skills, as well as analytical, problem-solving skills and ability to work independently as well as lead the communication and work with both onsite and offshore team members.
High attention to detail and rigor in documentation.
We are unable to provide U.S. sponsorship for this opportunity.

Nice To Haves

Experience with SAP S/4HANA security (including Fiori app security, catalogs, and groups).
Experience with SAP GRC Access Control (ARA, ARM, EAM, BRM) or similar access risk tools.
Familiarity with: SAP Basis concepts (clients, transports, system landscape).
Identity Management / IAM tools (e.g., SAP IDM, Azure AD etc.).
Experience in Manufacturing Industry.
Closer to nine (9) years of experience in SAP Security, focusing on SAP Firori and Governance, Risk & Compliance.

Responsibilities

Manage end-to-end user access lifecycle: onboarding, changes, transfers, and deprovisioning across SAP systems.
Perform periodic user access reviews with business owners and remediate excessive or unused access.
Design and maintain SAP roles and authorization concepts based on least privilege and SoD principles.
Analyze SoD conflicts and sensitive access risks using SAP GRC or equivalent tools.
Propose and implement remediation or mitigating controls for SoD and critical access violations.
Work with functional teams (FI/CO, MM, SD, PP, etc.) to map business processes to appropriate role designs.
Configure and maintain SAP GRC Access Control where applicable.
Support internal and external audits (e.g. SOX, ITGCs), providing evidence, access listings, and control documentation.
Ensure compliance with regulatory and internal policies (e.g. SOX, GDPR, data privacy, information security standards).
Document and maintain security-related procedures, controls, and process flows.
Work with SAP Basis and Infrastructure teams on security patches, system hardening, and configuration changes.
Support incident response for SAP-related security events (access misuse, data exposure, etc.).
Participate in SAP implementation, rollout, upgrade, and enhancement projects as the security lead or SME.
Translate business requirements into secure role designs and authorization concepts for new functionalities.
Partner with business process owners to understand access needs and define appropriate role structures.
Provide guidance and training to IT and business users on SAP security best practices and processes.
Communicate risks, impacts, and options clearly to non-technical stakeholders.

Benefits

great compensation package
annual profit sharing
matching 401k
the ability to participate in Employee Stock Purchase Plan
Flexible Spending and Health Savings Accounts
Flexible paid time off, holidays and parental leave program
Comprehensive insurance coverage including medical, dental, vision, life, disability, Employee Assistance Plan (“EAP”) and other supplemental benefit coverages
Tuition Assistance
mentorship and coaching opportunities
leadership development and other personal growth programs
Employee Resource Groups, cultural events, and celebrations