SAP Application Security Analyst: Access & SoD Governance

Baltimore Aircoil Company De Mexico S DE; Ciénega de Flores; On-site; MXN 350,000 - 520,000; Full time

Job summary

Baltimore Aircoil Company De Mexico S DE is seeking an Application Security Analyst to help protect the SAP-centric application estate and support access governance across SAP and non-SAP apps. Under guidance of senior security colleagues, you will build SAP roles, process access, support SoD analyses, and assist audit evidence preparation while developing broader security expertise.

This entry-level role requires strong attention to detail and cross-functional collaboration in a manufacturing

Qualifications

• Bachelor’s degree in information technology, computer science, information security, business, or a related field.
• Around 1 to 2 years of experience in SAP security, IT access administration, application support, or a related role; strong candidates earlier in their career will be considered.
• Foundational understanding of SAP authorization concepts - users, roles, profiles, authorization objects — and of common authorization error patterns.

Responsibilities

• Build, maintain, and test SAP roles, profiles, and authorizations in line with design specifications and established security standards, under the guidance of senior colleagues.
• Troubleshoot authorization errors, analyzing missing objects and values and proposing appropriate role changes for review.
• Support role redesign, cleanup, and remediation activities across the SAP landscape.
• Maintain accurate documentation of roles, authorization designs, and changes to support transparency and audit.
• Process user access requests across SAP and, where required, non-SAP applications, strictly in line with approved access request and approval workflows.
• Create, amend, and deactivate user accounts and access accurately and within agreed service levels.
• Escalate, without exception, any request that appears to breach segregation of duties, approval policy, or established controls.
• Maintain complete and accurate records of access changes to support internal and external audit requirements.
• Support segregation of duties (SoD) analysis using SAP GRC or equivalent tooling, preparing reports, identifying conflicts, and tracking remediation under senior guidance.
• Support periodic user access reviews and role recertification, preparing extracts, coordinating with reviewers, chasing responses, and recording outcomes.
• Help prepare evidence and respond to internal and external audit requests relating to application access and security controls (for example SOX ITGC).
• Help maintain the SoD rule set and control documentation under the direction of senior application security colleagues.
• Support day-to-day application security operations, including monitoring access logs and security-relevant reports and flagging anomalies for review.
• Assist with the application-layer aspects of security patching, vulnerability remediation, and security acceptance for releases, in coordination with development, SAP Basis, and the Infrastructure, Operations & Security team.
• Support security testing and validation activities during projects, upgrades, and new application deployments.
• Escalate potential security incidents promptly and support their investigation and resolution.
• Work closely with SAP Business Analysts, application support, developers, and the Infrastructure, Operations & Security team on access and security matters.
• Build knowledge of the wider application estate and of security concepts beyond SAP, growing toward a broader application security capability.
• Contribute to knowledge base articles, standard operating procedures, and continuous improvement of access and security processes, including automation of routine tasks.
• Maintain awareness of relevant security policies, standards, and good practice, and apply them consistently.

Skills

SAP security

IT access administration

SOX/GDPR awareness

Documentation & audit evidence

English communication

Education

Bachelor’s degree in information technology or related field

Tools

SAP GRC Access Control

SAP Basis

Job description

Baltimore Aircoil Company De Mexico S DE is seeking an Application Security Analyst to help protect the SAP-centric application estate and support access governance across SAP and non-SAP apps. Under guidance of senior security colleagues, you will build SAP roles, process access, support SoD analyses, and assist audit evidence preparation while developing broader security expertise.

This entry-level role requires strong attention to detail and cross-functional collaboration in a manufacturing