SAP Security Analyst

Titan America; Norfolk (VA); On-site; USD 110,000 - 140,000; Full time

Job summary

Titan America is hiring a full-time, mid-level SAP Security Analyst to support SAP S/4HANA and SAP BW security in a SOX-regulated, multinational environment. The analyst reports to the SAP Security team lead and collaborates with Process Owners, Business users, IT leads, Internal Audit and External Auditors.

The role covers core SAP security operations including roles design, user provisioning, SOX controls, and SoD analysis with Security Weaver.

Qualifications

• Bachelor's degree in Information Technology, Computer Science or equivalent.
• 5 to 7 years of hands-on SAP Security experience S4/HANA and BW.
• Strong role design skills: derived roles, org-level maintenance, authorization default values and authorization object field values.
• Hands-on experience with Security Weaver for SoD, emergency access and role management.
• Fiori security experience.
• Experience supporting SOX controls, SAP and SOX user audits, and evidence for external auditors.
• Proficiency with ServiceNow.
• Ability to translate technical security findings into actionable guidance for leadership.

Responsibilities

• Design, build and maintain single, derived and composite roles.
• Work with functional teams to translate business requirements into roles and authorization values.
• Maintain BW roles and analysis authorizations.
• Perform user provisioning, deprovisioning and role or job function changes through ServiceNow with approval evidence.
• Troubleshoot missing authorizations and security issues
• Resolve ServiceNow access tickets within agreed SLAs.
• Use Security Weaver for SoD risk analysis, access request workflows and emergency (firefighter) access.
• Conduct SoD and sensitive access analysis, document mitigating controls and drive remediation.
• Investigate SoD violations and draft false-positive justifications for review.
• Support periodic user access reviews and firefighter/emergency access log reviews.
• Respond to Internal Audit and External Auditor requests with system screenshots, table extracts and test evidence.
• Document security policies, procedures and role designs.
• Provide training and guidance to end users and internal teams on SAP security practices.
• Perform other duties as assigned.

Skills

SAP Security

SoD analysis

Role design

SOX controls

Fiori security

Audit support

ServiceNow

Education

Bachelor's degree in IT or CS

Tools

Security Weaver

ServiceNow

SAP S/4HANA

SAP BW

Job description

The Company is hiring a full-time, mid-level SAP Security Analyst to support SAP S/4HANA and SAP BW security in a SOX-regulated, multinational environment. The analyst reports to the SAP Security team lead and works directly with Process Owners, Business users, IT leads, Internal Audit and External Auditors.

The analyst will own core SAP security operations, including roles design and configuration, user provisioning and deprovisioning, and resolution of security and authorization issues. Responsibilities extend to SoD and sensitive access analysis in Security Weaver, SOX audit readiness and risk remediation.

The analyst will play a key role in strategic initiatives that support the Company's growth: integrating newly acquired companies into the SAP security framework, supporting SAP upgrades and securing third-party applications connected to SAP.

Key responsibilities

• Design, build and maintain single, derived and composite roles.
• Work with functional teams to translate business requirements into roles and authorization values.
• Maintain BW roles and analysis authorizations.
• Perform user provisioning, deprovisioning and role or job function changes through ServiceNow with approval evidence.
• Troubleshoot missing authorizations and security issues
• Resolve ServiceNow access tickets within agreed SLAs.
• Use Security Weaver for SoD risk analysis, access request workflows and emergency (firefighter) access.
• Conduct SoD and sensitive access analysis, document mitigating controls and drive remediation.
• Investigate SoD violations and draft false-positive justifications for review.
• Support periodic user access reviews and firefighter/emergency access log reviews.
• Respond to Internal Audit and External Auditor requests with system screenshots, table extracts and test evidence.
• Document security policies, procedures and role designs.
• Provide training and guidance to end users and internal teams on SAP security practices.
• Perform other duties as assigned.

Required qualifications

• Bachelor's degree in Information Technology, Computer Science or equivalent.
• 5 to 7 years of hands-on SAP Security experience S4/HANA and BW
• Strong role design skills: derived roles, org-level maintenance, authorization default values and authorization object field values.
• Hands-on experience with Security Weaver for SoD, emergency access and role management.
• Fiori security experience.
• Experience supporting SOX controls, SAP and SOX user audits, and evidence for external auditors.
• Proficiency with ServiceNow.
• Ability to translate technical security findings into actionable guidance for leadership.