Specialist, SAP Security

Oatey Company • Cleveland, OH

2d • $86,418 - $138,269 • Hybrid

About The Position

The SAP Security Specialist is responsible for the design, governance, and ongoing management of SAP security and access controls within Oatey’s SAP S/4HANA environment. This role serves as an individual contributor, owning Business Role Management, SAP GRC Access Control, and user access governance to ensure secure, compliant, and business-aligned SAP solutions. The position partners closely with business, functional, and technical teams to translate job responsibilities into least-privilege role designs, support audit and compliance requirements, and continuously improve SAP security maturity.

Requirements

• 5+ Years SAP Security and GRC experience.
• Good understanding of the SAP authorization concept and the role-based access control model.
• Ability to set up roles and administer them to users (including derived and composite roles).
• Hands-on experience with Business Role Management in SAP, including job-based role modeling and role lifecycle governance.
• Experience in SAP GRC Access Controls Suite / Process Controls Suite.
• Experience with SAP GRC 12 – including reporting capabilities and S4 HANA.
• Experience with implementation of mitigation controls for SOD violations and remediation.
• Multiple years’ experience in SAP system audit and risk management and able to effectively strategize control testing and implementation.
• 5 years in relevant security governance, risk and compliance roles focused on executing SAP security and associated identity and access management function.
• Experience in risk assessments and audits related to all products and functions e.g., HANA, Basis, Fiori etc. implemented as part of the SAP technology portfolio.
• Strong skills in SAP Security Design Configuration and Administration.
• Experience with automation technologies such as scripting languages, APIs, and workflow automation tools.
• Bachelor of Science degree in Computer Science, Engineering, or a related subject, or equivalent relevant work experience.

Responsibilities

• Responsible for maintaining business blueprint and design documents that support Security and GRC activities.
• Administer SAP GRC Access Control suite of programs, including user provisioning, segregation of duty management, emergency access, role management and reporting.
• Design, implement, and govern business roles aligned to job functions and business processes, including role lifecycle management, ownership, and periodic review.
• Partner with business and functional stakeholders to translate job responsibilities into compliant, least-privilege SAP role designs.
• Administer GRC User Access Management Process to monitor key business processes.
• Responsible for leading SAP GRC maintenance, user role/account management maturity and evolution.
• Develop InfoSec capabilities while developing and maintaining security standards, policies, procedures and processes while ensuring that company systems are fully compliant with all applicable regulatory requirements and privacy laws.
• Maintain SAP S/4HANA & FIORI Security based solutions.
• Coordinating with various teams for administration of Security and GRC tasks.
• Assist functional and technical team with solving critical issues, as it relates to Security or GRC.
• Assist team in administering heterogenous security tool landscape.
• Integrate SAP security and GRC systems with other security tools and platforms to orchestrate end-to-end security processes and improve interoperability.

Benefits

• Generous paid time off programs and paid company holidays to support flexibility and work-life balance
• Annual Discretionary Cash Profit Sharing
• Immediate eligibility and vesting in 401(k), including 100% company match, up to 5% of eligible compensation
• Market leading health insurance including medical, dental, vision, and life insurance offerings for associates and qualified dependents
• Significant company contribution to Health Savings Account with a High Deductible Health Plan (HDHP)
• Short-Term and Long-Term Disability income protection coverage at no cost to associates
• Paid Maternity and Paid Parental Leave
• Tuition reimbursement
• A strong set of complementary resources to support associate well-being, including resource groups, EAP, and dedicated mental health support.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Number of Employees: 501-1,000 employees