Senior Analyst, SAP Security and Controls

natgridProd•New York, NY

4d•$105,000 - $140,000•Hybrid

About The Position

We’re looking for a passionate Senior Analyst, SAP Security and Controls to join our US ERP Security Team! Reporting to the Manager, Finance Technology Enablement, Business Operations Systems Support User Access & Controls, this position is responsible for creating and maintaining valued partnerships with the business by supporting the business’ User Access & Controls needs and processes. This role will coordinate day to day business user support for GRC access request processing and SOX audit responsibilities. This position will also coordinate the day-to-day interface with key business users in the provisions of services; analyze data and activities to provide relevant and up-to-date information to support decision-making and the effective working of National Grid. This role is based out of our Brooklyn, Waltham or Syracuse office, and we’d hope to see you at least two days per week but you’re welcome to be in the office more often if that would work best for you. We’re happy to discuss any additional flexibility in working patterns or requirements that you feel could help to make this job work for you!

Requirements

Practical controls experience gained through control operation, risk and controls, internal or external audit, compliance or a comparable assurance role, with a sound understanding of control design, evidence, testing, issue management, remediation and audit readiness.
Practical SAP experience gained through SAP security or authorisation maintenance, SAP controls, SAP audit, access management, application support, system maintenance or a comparable role.
Minimum of 5 + years Sarbanes Oxley controls (SOx) experience
Strong leadership, meticulous attention to detail, excellent verbal and written skills and excellent interpersonal skills
Working knowledge of SAP roles and authorisations, user administration, access management, Segregation of Duties, critical or privileged access and risk mitigation.
Experience administering or supporting access for non-SAP enterprise applications, with the ability to learn new systems and apply consistent security and control principles.
Experience supporting projects, system changes or transformation activity, including requirements analysis, testing, documentation, risk assessment, go-live and transition to business as usual.
Strong analytical skills and confidence working with large datasets, including Excel formulas, lookups, pivot tables, filters and data-quality checks.
Ability to investigate complex issues, understand business and end-user needs and recommend practical, proportionate and risk-based solutions.
Clear communication and stakeholder-management skills, with the ability to work effectively across global teams, auditors, technical specialists and third-party providers while managing competing priorities across time zones.

Responsibilities

Support the SAP security and authorisation environment, including user administration, roles, profiles, authorisation objects, Fiori or portal access and related security configuration.
Administer SAP GRC or equivalent access processes, including access requests, provisioning, amendments, removals, privileged or emergency access and periodic reviews.
Investigate and resolve access issues, role defects and security incidents, and assess Segregation of Duties and critical access risks, supporting remediation through role redesign, access removal or mitigating controls.
Execute and quality-check SOX, IT General Controls, business and financial controls for SAP and other in-scope applications, maintaining complete, accurate and auditable evidence.
Support control testing, walkthroughs and internal or external audit requests, identify control or evidence weaknesses and track sustainable remediation through to completion.
Analyse access, control and system data to identify exceptions, anomalies, trends and risks, and produce clear management information and reporting.
Administer access and security for selected non-SAP finance and business applications, maintaining appropriate records, documentation, evidence and least-privilege access.
Represent SAP Security and Controls on projects, enhancements and transformation programmes, contributing to requirements, role and control design, testing, issue resolution, go-live readiness and transition into business as usual.
Work collaboratively with global Finance, Technology, Risk and Controls, Digital Risk and Security, auditors, business teams and third-party providers to resolve issues and deliver consistent outcomes.
Identify opportunities to simplify, standardise and automate security and control processes while maintaining governance, auditability and control effectiveness.