SAP Security Architect

OLDCASTLE INFRASTRUCTURE, INC.; Atlanta (GA); Remote; USD 100,000 - 130,000; Full time

Benefits offered by this job

401(k) plan

Disability insurance

Life insurance

Health, dental and vision insurance

Paid time off

Paid holidays

Job summary

CRH Americas Building Products is seeking a SAP Security Architect to design, implement, and support SAP Security, focusing on GRC Access Control within a S/4HANA private cloud. The role requires hands-on delivery and pragmatic architecture in a greenfield environment.

The position is remote from Atlanta, GA, with travel to sites as needed; you will lead an offshore team and ensure SOX ITGC controls are embedded in security design and operations.

Qualifications

• 10+ years of experience in SAP application security.
• 2+ full life cycle SAP S/4Hana security implementations, including greenfield projects.
• 2+ GRC access control implementations on S/4/HANA.
• Strong knowledge of SoX ITGC controls and security frameworks.

Responsibilities

• Conduct detailed analysis and design sessions with functional teams and business.
• Hands-on build and test security roles; resolve defects during test cycles and support UAT.
• Architect governance processes to provision and administer security roles for SAP and connected apps.
• Lead an offshore team; guide resources and ensure timely completion.
• Ensure role provisioning and user access complies with SOX and company policies.
• Develop and maintain centralized GRC rule sets and workflows for provisioning/ de-provisioning.

Skills

Security architecture

Identity & access management

SOX ITGC controls

Leadership

Stakeholder management

Education

Bachelor's degree in Computers/Information Technology or related field

Tools

SAP S/4HANA

GRC Access Control

Job description

CRH Americas Building Products is reinventing what's possible in building solutions. We are the leading provider of innovative outdoor living products and utility infrastructure solutions for the water, energy, and communications markets throughout North America. We're a trusted and strategic partner to engineers, contractors, distributors, specifiers, retailers and homeowners alike as the manufacturer of precast concrete, polymer concrete, and plastic infrastructure products. Our portfolio of brands includes Oldcastle APG, Oldcastle Infrastructure, Belgard hardscape, Echelon Masonry, RDI railing, Catalyst Fence Solutions, Sakrete packaged concrete, Amerimix mortar, Pebble Technology International pool finishes, and Techniseal sands and sealant technologies.

Job Summary

Oldcastle Infrastructure Inc. (OII) is looking for a SAP Security Architect. He/She will be responsible for architecting, designing, implementing, and supporting SAP Security and in particular SAP GRC Access control modules in a greenfield implementation environment of S4/Hana private cloud. The right candidate is able to architect and design a SAP solution and to follow a pragmatic hands-on approach to put it in place.

Job Location

This role is a remote role based out of Atlanta, GA.

Job Responsibilities

• Conduct detailed analysis and design sessions with functional teams and business
• Hands-on build and test security roles, resolve defects during test cycles, support UAT, and plan and execute security related cutover activities
• Architect governance processes to provision and administer security roles for SAP and connected applications
• Develop Support Concept and run support and maintenance
• Identify role owners and automate the role and user provisioning processes
• Perform user access review and provide analysis for internal and external auditors as required
• Evaluate business risks associated with security role design, implement appropriate controls to address those risks, and provide recommendations on ways to simplify and streamline the security design
• Monitor, report, and remediate elevated role provisioning to ensure unauthorized access removal for live production
• Ensure role provisioning and user access privileges comply with company security policies and SOX regulation
• Architect, design, build, test, and maintain a centralized GRC rule sets, workflows, and approvers for user provisioning /de-provisioning, authentication/authorization/emergency access, and access recertification based on business needs, industry best practices, and regulatory requirements.
• Implement and maintain a sustainable SOX concept
• Lead an offshore team. Guide resources, assign tasks, and ensure their timely completion
• Determine resource and capacity constraints and elevate issues to management
• Manage all security related project milesontes and tasks, run task lists, assign owners, track completion
• Work closely together with other project groups to stay in synch on common goals

Job Requirements

• 10+ years of experience in SAP application security.
• 2+ full life cycle SAP S/4 Hana security implementations, including greenfield implementations.
• 2+ GRC access control implentations on S4/Hana.
• Thorough understanding of the latest S4/Hana SAP Authorization concepts.
• Knowledge of information security frameworks, methodologies, policies, standards, and best practices.
• Knowledge of identity and access management tools and processes.
• Thorough understanding of SoX ITGC controls.
• Ability to assess business role requirements, design authorization roles, and manage supporting authorizations.
• Ability to speak to infrastructure-level security concerns and to work with the technical team to ensure such concerns are addressed.
• Ability to provide guidance and direction to SAP technical and non-technical staff as well as Internal Audit key stakeholders on SAP security frameworks and processes.
• Demonstrated experience managing customer-facing, strategic projects as well as Application Development projects.
• Strong conceptual, analytical, problem-solving, troubleshooting, and resolution skills.
• Ability to work in a collaborative team environment with individuals at appropriate levels of the company.
• Bachelor's Degree or equivalent in Computers, Information Technology, or related field.
• Experience leading an offshore team.
• Ability to own and drive work with little guidance.
• Ability to travel to Atlanta one week each month and occasional travel to sites (go-lives, testing, etc.)

Job Compensation

• Base salary range of $100,000-130,000 per year
• Bonus opportunity 15%
• 401(k) plan / group retirement savings program
• Short-term and long-term disability benefits
• Life insurance
• Health, dental, and vision insurance
• Paid time off
• Paid holidays

What CRH Offers You

• Highly competitive base pay
• Comprehensive medical, dental and disability benefits programs
• Group retirement savings program
• Health and wellness programs
• An inclusive culture that values opportunity for growth, development, and internal promotion

About CRH

CRH has a long and proud heritage. We are a collection of hundreds of family businesses, regional companies and large enterprises that together form the CRH family. CRH operates in a decentralized, diversified structure that allows you to work in a small company environment while having the career opportunities of a large international organization.

CRH Americas Building Products (ABP), a CRH Company, is an affirmative action and equal opportunity employer.

EOE/Vet/Disability

CRH is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, status as a protected veteran or any other characteristic protected under applicable federal, state, or local law.

AI tools may be used in certain stages of the employment lifecycle, such as candidate review; however, all final employment decisions will be made by a person.