Information Security Analyst

UCRYA; Town of Florida (NY); On-site; USD 120,000 - 180,000; Full time

Job summary

UCRYA LLC is seeking an experienced Information Security Analyst to lead SAP security design, governance, and access control across S/4 HANA, Fiori, BW/HANA, HCM, SRM, and CRM.

You will administer SAP GRC modules, design RBAC, monitor privileged access, and drive SOX compliance. Strong communication and risk assessment skills are essential for collaborating with control owners and supporting go-lives.

Qualifications

• Proven experience in SAP Security and GRC administration.
• Strong SOX controls, SOD analysis, and audit compliance knowledge.
• Familiarity with SAP platforms (S/4 HANA, Fiori, BW/HANA, HCM) and cloud/on-prem security.

Responsibilities

• Administer SAP GRC AC, PC, and RM.
• Design and implement RBAC across SAP modules.
• Monitor Firefighter access and elevated privileges.
• Perform risk assessments and mitigation planning.
• Support SOX compliance and audit readiness.
• Review and resolve SOD conflicts and strengthen governance.
• Collaborate with control owners to remediate violations.
• Promote user security awareness and best practices.
• Support UAT, SIT, and cutover activities during go-lives.

Skills

SAP Security

GRC administration

SOX controls

SOD analysis

Audit compliance

Problem solving

Communication skills

Tools

SAP GRC

Job description

UCRYA LLC is seeking an experienced Information Security Analyst to lead SAP security design, governance, and access control. You’ll protect enterprise SAP environments—both on-premises and in the cloud—by configuring roles and authorizations across platforms including S/4 HANA, Fiori, BW/HANA, HCM, SRM, and CRM.

Key Responsibilities:

• Administer SAP GRC Access Control (AC), Process Control (PC), and Risk Management (RM)
• Design and implement role-based access controls across SAP modules
• Monitor and manage Firefighter access and elevated privileges
• Perform risk assessments, identify security vulnerabilities, and propose mitigation strategies
• Ensure SOX compliance and support audit readiness
• Review and resolve SOD (Segregation of Duties) conflicts
• Configure SAP GRC workflows and Business Role Management
• Collaborate with control owners to remediate violations and strengthen governance
• Promote user security awareness and best practices
• Support UAT, SIT, and cutover activities during go-lives or upgrades

Requirements:

• Proven experience in SAP Security and GRC administration
• Strong understanding of SOX controls, SOD analysis, and audit compliance
• Familiarity with SAP platforms (S/4 HANA, Fiori, BW/HANA, HCM, etc.)
• Knowledge of cloud and on-prem SAP security frameworks
• Excellent problem-solving and communication skills