SAP GRC Analyst

YETI Coolers, LLC; United States; On-site; USD 110,000 - 160,000; Full time

Job summary

YETI is seeking a SAP GRC Analyst to support GRC administration, SoD analysis, and access controls. You will work with SAP Security, Internal/External Audits, and business teams to resolve and separate access while maintaining SOX compliance.

The role involves reviewing transactions, managing GRC rulesets, and coordinating user access reviews. A BS in a related field and 5+ years of experience are required.

Qualifications

• BS degree in Information Security, MIS, or Computer Science preferred (or equivalent)
• 5+ years of relevant experience in GRC or SAP security
• Experience analyzing SoD risks and mitigating controls
• SAP Security experience across S/4 HANA, BPC, BW, Fiori, PI/PO, SNC, and Solution Manager
• GRC administration experience in ARM, ARA, EAM, and UAR
• Understanding of SOX compliance and SAP cloud security

Responsibilities

• Review SAP standard and custom transactions for SoD impact
• Identify and implement cross-system SoD solutions
• Administer and monitor GRC rulesets, mitigations, alerts, and reports
• Monitor GRC requests ensuring timely resolution
• Assist with role ownership identification and management in GRC
• Develop and maintain process documentation
• Support audits related to access controls and remediation
• Provide end-user training on GRC processes
• Coordinate end-to-end periodic user access reviews for SOX compliance

Skills

SoD analysis

GRC administration

SAP Security

SOX compliance

Documentation

Education

BS in Information Security / MIS / CS

Tools

S/4 HANA

BPC

BW

Fiori

PI/PO

Solution Manager

ARM

ARA

EAM

UAR

Job description

At YETI, we believe that time spent outdoors matters more than ever and our gear can make that time extraordinary. When you work here, you’ll have the opportunity to create exceptional, meaningful work and problem solve with innovative team members by your side. Together, you’ll help our customers get the high-quality gear they need to make the most of their adventures. We are BUILT FOR THE WILD™.

About the Role

The SAP GRC Analyst will be responsible for GRC administration and segregation of duties (SoD) analysis. You will be responsible for evaluating risks and implementing continuous improvement initiatives. This role is to work with the other members of the IT Compliance team to support regulatory access controls and manage our GRC instance. You will engage with the SAP Security team, Internal Audit, External Audit, and the business to resolve, review, and separate access.

What You’ll Do

• Review SAP standard and custom transactions for Segregation of Duties (SoD) impact
• Identify and implement solutions for cross-system SoD conflicts
• Administer and monitor GRC rulesets, mitigations, alerts, and reports
• Monitor GRC requests to ensure timely resolution
• Assist with the identification and management of role owners within the GRC instance
• Develop and maintain documentation for both new and existing business and system processes
• Assist with any system technical issues such as upgrades and UAT
• Support internal and external audits as it relates to access controls, mitigation, and remediation
• Assist with end-user training around GRC processes and procedures
• Coordinate end-to-end periodic user access reviews to meet SOX compliance

What You Bring

• BS degree in Information Security, Management of Information Systems, or Computer Science preferred (or equivalent experience)
• Greater than 5 years of relevant experience
• Experience analyzing SoD risks and identifying mitigating controls
• SAP Security experience across various applications including, but not limited to S/4 HANA, BPC, BW, Fiori, PI/PO, SNC, and Solution Manager
• GRC administration experience around following modules: Account Request Management (ARM), Access Risk Analysis (ARA), Emergency Access Management (EAM), and User Access Review (UAR)
• Understanding of Sarbanes-Oxley (SOX) Compliance and SAP cloud security
• Ability to work independently while managing multiple priorities
• Clear written and verbal communication #LI‑LW1

Benefits & Perks

YETI is proud to be an Equal Opportunity Employer. Our commitment to creating a diverse, equitable, and inclusive culture is at the center of everything we do for our employees. We embrace all applicants looking to bring their authentic selves to YETI and contribute to our mission of keeping the wild WILD. Find out more about our commitment to DE&I at yeti.com/esg.html. All applicants for employment will be considered without regard to an individual’s race, color, sex, gender identity, gender expression, religion, age, national origin or ancestry, citizenship, physical or mental disability, medical condition, family care status, marital status, sexual orientation, genetic information, military or veteran status, or any other basis protected by federal, state or local laws.

Additional Information

YETI Applicant Privacy Notice

YETI welcomes and encourages applications from people with disabilities. Accommodations are available upon request for candidates taking part in all aspects of the selection process. If you require accommodation in order to apply for a job, please contact us at [e-mail].

At YETI, we design products that last for generations, get you outside, and keep you there longer. If you're looking to take on big challenges and have a passion for keeping the wild, wild – let’s talk.