SAP GRC Analyst

YETI; Austin (TX); On-site; USD 90,000 - 120,000; Full time

Job summary

YETI in Austin, TX seeks an experienced SAP GRC Analyst to administer GRC systems, analyze SoD risks, and support SOX compliance. You will work with SAP Security, Internal and External Audit teams to resolve access issues and implement mitigating controls across multiple SAP applications.

The role emphasizes cross-functional collaboration, documentation, and ongoing improvements to access controls and governance processes in a fast-paced environment.

Qualifications

• BS degree in Information Security, MIS, CS or equivalent.
• 5+ years of relevant SAP GRC/IT compliance experience.
• Experience analyzing SoD risks and implementing mitigating controls.
• SAP Security experience across multiple applications and modules.
• SOX/ITGC awareness and ability to support audits.

Responsibilities

• Review SAP standard and custom transactions for SoD impact.
• Identify and implement cross-system SoD conflicts.
• Administer and monitor GRC rulesets, mitigations, alerts, and reports.
• Monitor GRC requests for timely resolution and accuracy.
• Assist with role owner management in the GRC instance.
• Develop and maintain documentation for processes.
• Support upgrades, UAT, and technical issues as needed.
• Assist internal/external audits related to access controls.
• Coordinate end-to-end periodic user access reviews for SOX compliance.

Skills

SoD risk analysis

GRC administration

SOX compliance

Risk assessment

Documentation

Clear communication

Education

Bachelor's degree in Information Security / MIS / CS

Tools

S/4 HANA

BPC

BW

Fiori

PI/PO

SNC

Solution Manager

Job description

At YETI, we believe that time spent outdoors matters more than ever and our gear can make that time extraordinary. When you work here, you'll have the opportunity to create exceptional, meaningful work and problem solve with innovative team members by your side. Together, you'll help our customers get the high-quality gear they need to make the most of their adventures. We are BUILT FOR THE WILD™.

About the Role

The SAP GRC Analyst will be responsible for GRC administration and segregation of duties (SoD) analysis. You will evaluate risks and implement continuous improvement initiatives. This role is to work with the other members of the IT Compliance team to support regulatory access controls and manage our GRC instance. You will engage with the SAP Security team, Internal Audit, External Audit, and the business to resolve, review, and separate access.

What You'll Do

• Review SAP standard and custom transactions for Segregation of Duties (SoD) impact
• Identify and implement solutions for cross-system SoD conflicts
• Administer and monitor GRC rulesets, mitigations, alerts, and reports
• Monitor GRC requests to ensure timely resolution
• Assist with the identification and management of role owners within the GRC instance
• Develop and maintain documentation for both new and existing business and system processes
• Assist with any system technical issues such as upgrades and UAT
• Support internal and external audits as it relates to access controls, mitigation, and remediation
• Assist with end-user training around GRC processes and procedures
• Coordinate end-to-end periodic user access reviews to meet SOX compliance

What You Bring

• BS degree in Information Security, Management of Information Systems, or Computer Science preferred (or equivalent experience)
• Greater than 5 years of relevant experience
• Experience analyzing SoD risks and identifying mitigating controls
• SAP Security experience across various applications including, but not limited to S/4 HANA, BPC, BW, Fiori, PI/PO, SNC, and Solution Manager
• GRC administration experience around following modules: Account Request Management (ARM), Access Risk Analysis (ARA), Emergency Access Management (EAM), and User Access Review (UAR)
• Understanding of Sarbanes-Oxley (SOX) Compliance and SAP cloud security
• Ability to work independently while managing multiple priorities
• Clear written and verbal communication

Benefits & Perks

YETI is proud to be an Equal Opportunity Employer. Our commitment to creating a diverse, equitable, and inclusive culture is at the center of everything we do for our employees. We embrace all applicants looking to bring their authentic selves to YETI and contribute to our mission of keeping the wild WILD. Find out more about our commitment to DE&I at yeti.com/esg.html.

All applicants for employment will be considered without regard to an individual's race, color, sex, gender identity, gender expression, religion, age, national origin or ancestry, citizenship, physical or mental disability, medical condition, family care status, marital status, sexual orientation, genetic information, military or veteran status, or any other basis protected by federal, state or local laws.

YETI Applicant Privacy Notice

YETI welcomes and encourages applications from people with disabilities. Accommodations are available upon request for candidates taking part in all aspects of the selection process. If you require accommodation in order to apply for a job, please contact us at [e-mail].

At YETI, we design products that last for generations, get you outside, and keep you there longer. If you're looking to take on big challenges and have a passion for keeping the wild, wild - let's talk.