Senior SAP Security Consultant, ITT

Infosys

2d•$71,693 - $113,090

About The Position

The Senior SAP Security Consultant, in the assigned role of Package Consultant 2, works on ERP solutions for clients in the manufacturing sector. The role contributes to gathering and validating business requirements, designing and customizing ERP solutions, developing and maintaining application features, and integrating ERP systems with other applications. It also includes assessing system performance and security compliance, documenting customizations, and delivering user training. The role focuses on reviewing and improving Process Control business rules, partnering with Business Process Owners and Internal Audit, designing and testing business rules and monitoring logic, optimizing control frameworks, reviewing rule performance, and maintaining change records and audit documentation. Preferred duties include leading an SAP GRC Access Control and Process Control upgrade, coordinating readiness with SAP Basis, assessing upgrade impacts, validating functionality, resolving upgrade issues, and preparing upgrade and go-live documentation. A bachelor's degree or foreign equivalent is required, though three years of progressive specialty experience may substitute for each year of education. The position may require relocation and/or travel to the work or project location. Applicants must be authorized to work in the United States without employer-based visa sponsorship; Infosys cannot provide sponsorship now or in the future.

Requirements

Bachelor’s degree or foreign equivalent from an accredited institution; three years of progressive experience in the specialty may substitute for each year of education.
Experience reviewing, analyzing, and refining Process Control business rules.
Ability to work with Business Process Owners and Internal Audit to identify gaps or outdated rule logic.
Ability to design, build, and test business rules, including data sources, rule scripts, and automated monitoring logic.
Experience optimizing control objectives, control frameworks, and control-to-rule mapping for continuous monitoring.
Ability to review rule performance and recommend tuning based on exception trends and audit feedback.
Ability to support rule versioning, change management, and audit-traceable documentation.
Applicants must be authorized to work in the United States without employer-based visa sponsorship; Infosys cannot provide immigration sponsorship now or in the future.

Nice To Haves

Lead end-to-end planning and execution of SAP GRC Access Control and Process Control upgrades, including sizing, pre-upgrade checks, and post-upgrade validation.
Coordinate with SAP Basis on system landscape readiness, patching, and downtime planning.
Perform upgrade impact assessments for existing configurations, custom rules, workflows, and integrations.
Validate Access Control (ARA, ARM, EAM) and Process Control functionality after an upgrade.
Own upgrade-related defect triage and resolution, working with SAP OSS or vendor support as needed.
Prepare upgrade documentation, rollback plans, and go-live readiness checklists.

Responsibilities

Participate in requirements gathering with business stakeholders and help validate specifications against business objectives and ERP capabilities.
Contribute to solution architecture and customize ERP modules and features based on business requirements.
Develop and integrate application features, conduct code reviews, and maintain the codebase for stability and compliance.
Configure interfaces and execute ETL processes to support consistent data flow between ERP and other applications.
Assess ERP performance and identify enhancement opportunities while ensuring customizations comply with security measures and regulatory standards.
Document ERP customizations and deliver user training.
Review, analyze, and refine Process Control business rules to improve accuracy, reduce false positives, and reflect current business processes.
Partner with Business Process Owners and Internal Audit to identify gaps or outdated rule logic.
Design, build, and test new or modified business rules, including data sources, rule scripts, and automated monitoring logic.
Optimize control objectives, control frameworks, and control-to-rule mapping for continuous monitoring.
Review rule performance periodically and recommend tuning based on exception trends and audit feedback.
Support rule versioning, change management, and documentation of rule logic for audit traceability.
Lead planning and execution of SAP GRC Access Control and Process Control upgrades, including sizing, pre-upgrade checks, and post-upgrade validation.
Coordinate system landscape readiness, patching, and downtime planning with the SAP Basis team.
Assess upgrade impacts on configurations, custom rules, workflows, and integrations.
Validate Access Control (ARA, ARM, EAM) and Process Control functionality after upgrades.
Own upgrade-related defect triage and resolution, engaging SAP OSS or vendor support as needed.
Prepare upgrade documentation, rollback plans, and go-live readiness checklists.