Senior Analyst, SAP Security

Scotts Miracle-Gro•Minneapolis, MN

11d•$115,900 - $136,400•Remote

About The Position

As a Senior Analyst, SAP Security, you will play a crucial role in overseeing security and governance across our SAP landscape, including NetWeaver, S/4HANA and BTP environments. Key duties include managing SAP GRC for user provisioning, role administration, access risk evaluations, Segregation of Duties (SOD) reviews, and adhering to General IT Controls (GITC).

Requirements

2 to 3 years of hands-on experience in SAP Security and GRC (ARA, ARQ and EAM).
Demonstrated background in an analyst capacity.
Solid grasp of technical SAP security architectures, authorization frameworks, vulnerability management, and incident mitigation.
Understanding of General IT Controls (GITC) and compliance standards.
Strong problem-solving, analytical, and critical-thinking abilities.
Excellent interpersonal, written, and verbal communication skills.

Nice To Haves

ITIL 4 certification.
Completion of SAP GRC 100 and GRC 300 training courses.

Responsibilities

Fulfill routine user access and operational requests in line with standard operating procedures, driving continuous process improvements.
Work alongside technical specialists and key stakeholders to build security configurations that meet established guidelines across S/4 and NetWeaver modules (including Basis, BI, FICO, MM, SD, EWM, TM, EHS, DMS, and others).
Perform continuous risk evaluations regarding user access within SAP by actively maintaining and refining rule sets.
Track security alerts, review event logs, and investigate suspicious activities to maintain a robust SAP security posture.
Keep up to date with evolving SAP technology to design effective security strategies and satisfy business access requirements.
Promote and enhance security awareness across the organization through training programs, communication, and continuous education initiatives.
Stay informed about emerging cyber threats, technologies, and industry trends to continually enhance cyber security capabilities.