SAP GRC Analyst: SoD & SOX Compliance

YETI; Austin (TX); On-site; USD 90,000 - 120,000; Full time

Job summary

YETI in Austin, TX seeks an experienced SAP GRC Analyst to administer GRC systems, analyze SoD risks, and support SOX compliance. You will work with SAP Security, Internal and External Audit teams to resolve access issues and implement mitigating controls across multiple SAP applications.

The role emphasizes cross-functional collaboration, documentation, and ongoing improvements to access controls and governance processes in a fast-paced environment.

Qualifications

• BS degree in Information Security, MIS, CS or equivalent.
• 5+ years of relevant SAP GRC/IT compliance experience.
• Experience analyzing SoD risks and implementing mitigating controls.
• SAP Security experience across multiple applications and modules.
• SOX/ITGC awareness and ability to support audits.

Responsibilities

• Review SAP standard and custom transactions for SoD impact.
• Identify and implement cross-system SoD conflicts.
• Administer and monitor GRC rulesets, mitigations, alerts, and reports.
• Monitor GRC requests for timely resolution and accuracy.
• Assist with role owner management in the GRC instance.
• Develop and maintain documentation for processes.
• Support upgrades, UAT, and technical issues as needed.
• Assist internal/external audits related to access controls.
• Coordinate end-to-end periodic user access reviews for SOX compliance.

Skills

SoD risk analysis

GRC administration

SOX compliance

Risk assessment

Documentation

Clear communication

Education

Bachelor's degree in Information Security / MIS / CS

Tools

S/4 HANA

BPC

BW

Fiori

PI/PO

SNC

Solution Manager

Job description

YETI in Austin, TX seeks an experienced SAP GRC Analyst to administer GRC systems, analyze SoD risks, and support SOX compliance. You will work with SAP Security, Internal and External Audit teams to resolve access issues and implement mitigating controls across multiple SAP applications.

The role emphasizes cross-functional collaboration, documentation, and ongoing improvements to access controls and governance processes in a fast-paced environment.