Information Security Analyst

UCRYA; Florida; On-site; USD 110,000 - 160,000; Full time

Job summary

UCRYA LLC seeks an experienced Information Security Analyst to lead SAP security design, governance, and access control for on-premises and cloud environments. You will configure roles and authorizations across S/4 HANA, Fiori, BW/HANA, HCM, SRM, and CRM, ensuring SOX compliance and robust governance.

Responsibilities include administering GRC modules, designing RBAC across SAP landscapes, managing elevated access, and supporting audits and go-lives.

Qualifications

• Proven experience in SAP Security and GRC administration.
• Solid understanding of SOX controls and SOD analysis for audit readiness.
• Familiarity with SAP platforms (S/4 HANA, Fiori, BW/HANA, HCM, SRM, CRM).
• Knowledge of cloud and on-prem SAP security frameworks.
• Strong problem-solving and communication skills.

Responsibilities

• Administer SAP GRC Access Control, Process Control, and Risk Management.
• Design and implement role-based access controls across SAP modules.
• Monitor and manage elevated privileges and Firefighter access.
• Conduct risk assessments and propose mitigation strategies.
• Ensure SOX compliance and assist audits.
• Review SOD conflicts and remediate violations.
• Configure SAP GRC workflows and Business Role Management.
• Collaborate with control owners to strengthen governance.
• Promote security awareness and best practices.
• Support UAT, SIT, and cutover activities during go-lives or upgrades.

Skills

SAP Security

GRC Administration

SOX Controls

SOD Analysis

RBAC Design

Cloud & On-Prem SAP Security

Security Governance

Communication Skills

Tools

SAP GRC Access Control

S/4 HANA Security

Fiori Security

Job description

UCRYA LLC is seeking an experienced Information Security Analyst to lead SAP security design, governance, and access control. You’ll protect enterprise SAP environments—both on-premises and in the cloud—by configuring roles and authorizations across platforms including S/4 HANA, Fiori, BW/HANA, HCM, SRM, and CRM.

Key Responsibilities

• Administer SAP GRC Access Control (AC), Process Control (PC), and Risk Management (RM)
• Design and implement role-based access controls across SAP modules
• Monitor and manage Firefighter access and elevated privileges
• Perform risk assessments, identify security vulnerabilities, and propose mitigation strategies
• Ensure SOX compliance and support audit readiness
• Review and resolve SOD (Segregation of Duties) conflicts
• Configure SAP GRC workflows and Business Role Management
• Collaborate with control owners to remediate violations and strengthen governance
• Promote user security awareness and best practices
• Support UAT, SIT, and cutover activities during go-lives or upgrades

Requirements

• Proven experience in SAP Security and GRC administration
• Strong understanding of SOX controls, SOD analysis, and audit compliance
• Familiarity with SAP platforms (S/4 HANA, Fiori, BW/HANA, HCM, etc.)
• Knowledge of cloud and on-prem SAP security frameworks
• Excellent problem-solving and communication skills