Senior Business Systems Analyst I - SAP Security

MKS Instruments; Gurugram District; On-site; INR 1,600,000 - 2,800,000; Full time

Job summary

MKS Instruments in Gurugram, India, seeks a Sr SAP Security Analyst / BSA to design, implement, and support SAP Security and GRC across global landscapes. You will work with business, IT, audit and compliance teams to ensure secure access to SAP applications.

Responsibilities include RBAC-based role design, SoD, GRC configuration, access reviews, incident management, risk and ITGC controls, audits, and collaboration with PMO and SAP application teams on upgrades and security initiatives.

Qualifications

• Bachelor's degree in computer science, Information Technology, or equivalent.
• 7–10 years of experience in SAP Security and SAP GRC within global enterprise environments.
• Strong experience with SAP Security role design, build, deployment, administration, and troubleshooting.
• Strong hands-on experience with SAP GRC Access Control, including Access Risk Analysis, Access Request Management, Business Role Management, Emergency Access Management, workflows, and rule sets.
• Experience with SAP ECC 6.0 EHP7/EHP8; knowledge of SAP S/4HANA highly desired.
• Proven experience with RBAC and various SAP security models.
• Experience supporting SAP GRC upgrades and SAP system upgrade activities.
• Experience troubleshooting SAP GRC workflows, synchronization, provisioning, and authorization issues.
• Strong understanding of SoD, SOX, ITGC, audit, and compliance requirements.
• Experience with collaboration with internal and external auditors.

Responsibilities

• Design, implement, maintain, and support SAP Security roles across SAP products and projects.
• Administer SAP GRC Access Control configurations and workflows, including risk analysis and mitigation activities.
• Configure and support user access review processes and audit compliance activities.
• Troubleshoot SAP authorization, role, provisioning, and workflow issues; drive root-cause analysis.
• Support IT risk management activities and Maintain IT General Controls.
• Collaborate with PMO, SAP teams, business stakeholders, and partners on security initiatives.
• Maintain security documentation, specifications, and procedures.
• Identify opportunities to improve security processes and drive continuous improvement.

Skills

SAP Security

RBAC

SoD

ITGC

SOX

Audit Liaison

Security Documentation

Education

Bachelor's degree in computer science/IT or equivalent

Tools

SAP GRC Access Control

SAP ECC 6.0 EHP7/EHP8

SAP S/4HANA

Job description

A Day in Your Life at MKS:

As a Sr. SAP Security Analyst / BSA , reporting to the Senior Manager of SAP ERP Applications, you will be responsible for designing, implementing, maintaining, and supporting SAP Security and SAP GRC solutions across the global SAP landscape. You will work closely with business, application, infrastructure, audit, and compliance teams to ensure secure and compliant access to SAP applications.

You Will Make an Impact By:

SAP Security & Role Management:

Design, implement, maintain, and support SAP Security roles across various SAP products and projects. Develop and maintain role-based access models, including RBAC, and ensure appropriate segregation of duties (SoD). Support SAP ECC 6.0 EHP7/EHP8 environments, with knowledge of S/4HANA highly desired.

SAP GRC Administration & Access Governance:

Administer and support SAP GRC Access Control configuration, including rule sets, workflows, approvers, user provisioning, Emergency Access Management (EAM), and access recertification processes. Maintain SAP GRC master data and support the configuration and execution of risk analysis and mitigation activities.

Access Reviews & Compliance:

Configure and support user access review processes, workflows, and relevant parameters. Perform access and risk analysis and support audit and compliance activities. Work closely with internal and external auditors on SAP Security, SoD, SOX, and IT General Controls (ITGC) requirements.

Incident & Problem Management:

Provide support to AMS team in troubleshooting and resolve day-to-day SAP authorization, role, provisioning, and workflow-related issues. Investigate access-related incidents, identify root causes, and implement appropriate corrective actions while ensuring adherence to operational standards and service level commitments.

Risk Management, Controls & Audit:

Support IT risk management activities and help identify, assess, and address SAP-related business and IT risks. Execute and maintain IT General Controls to ensure control effectiveness. Participate in audit discussions, respond to audit questions, and support the remediation of SoD, SOX, and security control issues.

Project & Stakeholder Management:

Work closely with PMO teams, SAP application teams, business stakeholders, and external partners to deliver SAP Security solutions and support project requirements. Collaborate with cross-functional teams during SAP implementations, upgrades, role redesigns, and other security initiatives.

Security Standards & Documentation:

Ensure SAP Security and GRC processes comply with organizational security policies, controls, and best practices. Maintain accurate security documentation, technical specifications, procedures, and knowledge materials.

SAP Security Operations & Continuous Improvement:

Identify opportunities to improve security processes, automation, and operational efficiency.

Skills You Bring:

• Bachelor’s degree in computer science, Information Technology, or equivalent.
• 7–10 years of experience in SAP Security and SAP GRC within global enterprise environments.
• Strong experience with SAP Security role design, build, deployment, administration, and troubleshooting.
• Strong hands-on experience with SAP GRC Access Control , including Access Risk Analysis, Access Request Management, Business Role Management, Emergency Access Management, workflows, and rule sets.
• Experience with SAP ECC 6.0 EHP7/EHP8 ; knowledge of SAP S/4HANA highly desired.
• Proven experience with different SAP Security and role-design models, including RBAC.
• Experience supporting SAP GRC upgrades and SAP system upgrade activities.
• Experience troubleshooting SAP GRC workflows, synchronization jobs, provisioning, and authorization issues.
• Strong understanding of SoD, SOX, IT General Controls (ITGC), audit, and compliance requirements.
• Experience working with internal and external auditors and supporting audit remediation activities.
• Knowledge of IT and business risk management and control frameworks.
• Experience working in a global enterprise environment and collaborating with cross-functional teams.
• Strong communication, stakeholder management, time management, and project management skills.
• Ability to work independently and manage multiple priorities in a global environment.
• Excellent English communication skills, both written and spoken.
• Nice to have: Experience with SAP Cloud security and identity , including Ariba, C4C, and IBP.

Globally, our policy is to recruit individuals from wide and diverse backgrounds. However, certain positions require access to controlled goods and technologies subject to various export control regulations. Applicants for these positions may be limited (by, for example, their countries of citizenship, country of origin, or immigration status) where required by law or governmental contact, and/or employment made contingent upon the issuance of appropriate governmental licensing.

MKS Inc. and its affiliates and subsidiaries (“MKS”) is an affirmative action and equal opportunity employer: diverse candidates are encouraged to apply. We win as a team and are committed to recruiting and hiring qualified applicants regardless of race, color, national origin, sex (including pregnancy and pregnancy-related conditions), religion, age, ancestry, physical or mental disability or handicap, marital status, membership in the uniformed services, veteran status, sexual orientation, gender identity or expression, genetic information, or any other category protected by applicable law. Hiring decisions are based on merit, qualifications and business needs. We conduct background checks and drug screens, in accordance with applicable law and company policies. MKS is generally only hiring candidates who reside in states where we are registered to do business.