Senior Business Systems Analyst I - SAP Security

MKS Inc.; Gurugram District; On-site; INR 2,000,000 - 2,800,000; Full time

Job summary

MKS in Gurugram, India, seeks an experienced Sr. SAP Security Analyst to design, implement, and support SAP Security and GRC across the global SAP landscape.

You will work with business, IT, audit, and compliance teams to ensure secure access to SAP applications, manage roles, SoD, ITGC, and support SOX compliance, while coordinating with auditors and PMO on security initiatives.

Qualifications

• Bachelor's degree in CS/IT or equivalent.
• 7–10 years of SAP Security and SAP GRC experience.
• Hands-on SAP Security role design, build, and troubleshooting.
• Experience with SAP GRC Access Control and SoD/risk analysis.
• Excellent English communication and global collaboration.

Responsibilities

• Design, implement, and support SAP Security roles across SAP products.
• Coordinate with audits to meet SOX and ITGC requirements.
• Lead access reviews, risk analysis, and remediation activities.
• Provide incident investigation and operational improvements.

Skills

SAP Security

GRC

RBAC

SoD

ITGC

SOX

S/4HANA

ECC 6.x

Audit

Stakeholder Mgmt

Education

Bachelor's degree in CS/IT

Tools

GRC Access Control

Emergency Access Management

RBAC tooling

Job description

A Day in Your Life at MKS

As a Sr. SAP Security Analyst / BSA, reporting to the Senior Manager of SAP ERP Applications, you will be responsible for designing, implementing, maintaining, and supporting SAP Security and SAP GRC solutions across the global SAP landscape. You will work closely with business, application, infrastructure, audit, and compliance teams to ensure secure and compliant access to SAP applications.

SAP Security & Role Management

Design, implement, maintain, and support SAP Security roles across various SAP products and projects. Develop and maintain role-based access models, including RBAC, and ensure appropriate segregation of duties (SoD). Support SAP ECC 6.0 EHP7/EHP8 environments, with knowledge of S/4HANA highly desired.

SAP GRC Administration & Access Governance

Administer and support SAP GRC Access Control configuration, including rule sets, workflows, approvers, user provisioning, Emergency Access Management (EAM), and access recertification processes. Maintain SAP GRC master data and support the configuration and execution of risk analysis and mitigation activities.

Access Reviews & Compliance

Configure and support user access review processes, workflows, and relevant parameters. Perform access and risk analysis and support audit and compliance activities. Work closely with internal and external auditors on SAP Security, SoD, SOX, and IT General Controls (ITGC) requirements.

Incident & Problem Management

Provide support to AMS team in troubleshooting and resolve day-to-day SAP authorization, role, provisioning, and workflow-related issues. Investigate access-related incidents, identify root causes, and implement appropriate corrective actions while ensuring adherence to operational standards and service level commitments.

Risk Management, Controls & Audit

Support IT risk management activities and help identify, assess, and address SAP-related business and IT risks. Execute and maintain IT General Controls to ensure control effectiveness. Participate in audit discussions, respond to audit questions, and support the remediation of SoD, SOX, and security control issues.

Project & Stakeholder Management

Work closely with PMO teams, SAP application teams, business stakeholders, and external partners to deliver SAP Security solutions and support project requirements. Collaborate with cross-functional teams during SAP implementations, upgrades, role redesigns, and other security initiatives.

Security Standards & Documentation

Ensure SAP Security and GRC processes comply with organizational security policies, controls, and best practices. Maintain accurate security documentation, technical specifications, procedures, and knowledge materials.

SAP Security Operations & Continuous Improvement

Identify opportunities to improve security processes, automation, and operational efficiency.

Skills You Bring

• Bachelor's degree in computer science, Information Technology, or equivalent.
• 7-10 years of experience in SAP Security and SAP GRC within global enterprise environments.
• Strong experience with SAP Security role design, build, deployment, administration, and troubleshooting.
• Strong hands-on experience with SAP GRC Access Control, including Access Risk Analysis, Access Request Management, Business Role Management, Emergency Access Management, workflows, and rule sets.
• Experience with SAP ECC 6.0 EHP7/EHP8; knowledge of SAP S/4HANA highly desired.
• Proven experience with different SAP Security and role-design models, including RBAC.
• Experience supporting SAP GRC upgrades and SAP system upgrade activities.
• Experience troubleshooting SAP GRC workflows, synchronization jobs, provisioning, and authorization issues.
• Strong understanding of SoD, SOX, IT General Controls (ITGC), audit, and compliance requirements.
• Experience working with internal and external auditors and supporting audit remediation activities.
• Knowledge of IT and business risk management and control frameworks.
• Experience working in a global enterprise environment and collaborating with cross-functional teams.
• Strong communication, stakeholder management, time management, and project management skills.
• Ability to work independently and manage multiple priorities in a global environment.
• Excellent English communication skills, both written and spoken.
• Nice to have: Experience with SAP Cloud security and identity, including Ariba, C4C, and IBP.