IT CAM Analyst II

Smith & Wesson, Inc.

Maryville (TN)

On-site

USD 85,000 - 125,000

Full time

9 days ago

A complete application in a minute

Tailored resume and cover letter, ready to send.

Get past ATS filters

Benefits offered by this job

Prescription Drug Coverage

Employee Discounts

Paid Vacation

Job summary

Smith & Wesson is seeking an IT-CAM Analyst II to govern user access across IT systems, with a focus on SAP access and security. You will enforce SoD controls, review access requests, and participate in audit support within a structured, security-driven environment.

Onsite role reporting to the Senior Manager over IT-CAM, collaborating with IT and business teams to maintain access integrity, manage emergency access, and drive process improvements while growing expertise in governance and

Qualifications

3+ years of IT experience with at least 2 years hands-on SAP security/access administration
Experience supporting audit requirements and SOX controls preferred
Familiarity with access governance and change management processes

Responsibilities

Administer user access across IT systems and applications, reviewing and approving requests within control frameworks
Enforce least privilege and adjust access to meet role requirements
Manage SAP user accounts, T-code and role assignments across environments
Support role/authorization change requests and coordinate through change process
Collaborate with business units to evaluate access needs and ensure compliance
Evaluate SoD conflicts and provide mitigation recommendations
Manage emergency and temporary elevated access with proper approvals
Support access certification and audit readiness across portfolio of applications
Drive process improvements for consistent access management across systems
Serve as primary contact for audit requests and deliver evidence timely

Skills

Access management

SAP security

SoD concepts

Role/authorization management

IT service management

Analytical/problem solving

Cross-team communication

Job description

The IT-CAM Analyst II is responsible for managing and governing user access across the company's IT systems and applications, ensuring access controls are aligned with business needs, security standards, and compliance requirements. This role operates with a strong degree of independence, making risk-based access decisions and enforcing segregation-of-duties (SoD) controls, with a particular focus on SAP account and role administration. The Analyst II collaborates with business and IT teams to evaluate access needs, challenge requests where appropriate, and maintain the integrity of access controls, while also supporting access governance across a broader portfolio of non-SAP business applications. This is an experienced-level position, well suited to a candidate with solid, hands-on SAP access and security experience who is ready to take on meaningful ownership, including active participation in audit support and process improvement initiatives.

Onsite/non-remote. This is an individual-contributor role reporting to the Senior Manager over IT-CAM, working collaboratively alongside the current IT-CAM Analyst. This role does not have direct reports or supervisory responsibilities.

Key Responsibilities

Access Management: Administer user access across a wide range of IT systems and applications, ensuring permissions align with company policies, security standards, and business requirements, with responsibility for reviewing and approving access requests within established control frameworks.
Least Privilege Enforcement: Enforce the principle of least privilege by evaluating, approving, and adjusting access to ensure users maintain only the minimal necessary permissions required to perform their roles.
SAP Account & T-Code Management: Manage SAP user accounts and role assignments across production, development, and QA environments, including transaction code (T-code) access, ensuring appropriate alignment to job functions while preventing over-provisioning and access conflicts.
SAP Role & Change Management: Support role and authorization change requests, including researching required access, testing changes, and coordinating them through the standard change process.
Business Evaluation: Collaborate with business units to assess and validate access requests, applying business context and security principles. Challenge requests when necessary to maintain compliance and control integrity.
Segregation of Duties (SoD): Evaluate access requests and role changes for segregation-of-duties conflicts, apply sound risk-based judgment, and provide clear recommendations to mitigate identified risks.
Emergency Access Management: Manage emergency and temporary elevated access, ensuring proper approval and time-bound assignment.
Access Certification: Support the company's recurring access-certification and audit-review processes, helping ensure access remains appropriate and well documented over time.
Enterprise Access Governance: Own or assist with complex access requests across a variety of non-SAP business applications, partnering closely with the rest of the IT-CAM team.
Process Improvement: Review and improve access management processes across systems, driving consistency, efficiency, and adherence to security and compliance standards.
Audit Support: Serve as a primary contact for access-related audit requests. Ensure timely, accurate, and complete delivery of documentation and evidence to support internal and external audit requirements, including SOX.
Problem Resolution: Investigate and resolve access-related issues, including complex or cross-system scenarios, while maintaining security and minimizing business disruption.
Professional Growth: Opportunity to expand expertise in access management, security controls, and compliance within a structured and audit-driven environment.
Security Framework Development: Develop and apply a comprehensive understanding of NIST frameworks to support access management, security controls, and audit readiness.
Role Impact: This role is critical to maintaining the security, compliance, and operational integrity of enterprise systems by ensuring effective and consistent access control practices.

Experience:

3+ years of relevant IT experience, including at least 2 years of hands-on experience with SAP security, SAP access administration, or SAP authorization support (required). Experience in environments with structured access controls and audit requirements is strongly preferred.

Skills:

Strong understanding of access management principles and security best practices.
Working knowledge of segregation-of-duties (SoD) concepts.
Experience with SAP roles, T-code management, and role/authorization change management.
Experience with IT service management tools and ticketing systems.
Strong analytical and problem-solving skills with the ability to evaluate risk.
Effective communication skills, with the ability to work across technical and business teams.

Personal Attributes:

Detail-oriented, with a strong focus on accuracy and accountability.
Ability to operate independently and manage competing priorities.
Confident in decision-making and enforcing policy standards.
Focused on process consistency, control integrity, and continuous improvement.
A genuine willingness to learn how current processes work before proposing changes to them.
A collaborative, team-oriented approach; comfortable working independently without needing to supervise others.

(A note on experience): Candidates with deeper, broader SAP experience (including role design, change management, and access certification at scale) are strongly encouraged to apply and will be considered at the higher end of this role's range.

Physical Demands:

Works in an office environment.
Able to sit and work at a computer keyboard for extended periods of time.
Able to lift and move up to 40 pounds occasionally.

NOTE: Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

Work Environment and Personal Protective Equipment:

Within any of our facilities, employees may be exposed to manufacturing noise, airborne liquid chemicals, fine particulate dust, ambient temperatures, and industrial lighting. Work environment is similar to most manufacturing and distribution operations. May be exposed to excessive noise, temperatures, hazards associated with working around moving machinery, work in confined quarters, exposure to vibrations and shop lighting, continuous exposure to hot temperatures, may be humid, odors, dust, continuous exposure to mechanical hazards, and occasional exposure to chemical hazards.

The following Personal Protective Equipment is required:Safety glasses with side shields, safety shoes and hearing protection required when on manufacturing floor

The use of additional personal protective equipment (PPE) may be required when a job task(s) is being completed in or around your assigned department or in another department, this includes but, is not limited to, safety eyewear, hearing protection, chemical protection, fall protection, respiratory protection, head protection and safety footwear.

Who We Are

Since 1852 Smith & Wesson has empowered Americans with the freedom, equality, and security promised by the Declaration of Independence and guaranteed by the Bill of Rights. It is this sense of safety and security that frees us to pursue our goals and dreams, define our future, and fulfill the promise of America.