Senior Analyst, SAP Security and Controls

National Grid; New York (NY); Hybrid; USD 105,000 - 140,000; Full time

Job summary

National Grid in the US is seeking a Senior Analyst, SAP Security and Controls to join the US ERP Security Team. You will support SAP security, GRC access processes and SOX controls across business units, delivering timely, auditable evidence and ensuring risk-based access management.

You will collaborate with global Finance, Technology, Risk and Controls teams, auditors and business users across Brooklyn, Waltham or Syracuse with a hybrid schedule and flexible patterns to fit business needs.

Qualifications

• SOX controls experience and audit readiness.
• SAP security/authorisation maintenance experience.
• Experience with access management and role defects.
• Ability to analyze large data sets and provide management information.
• Strong communication and stakeholder-management skills.

Responsibilities

• Support SAP security and authorisation environment including user administration, roles, profiles, and Fiori/portal access.
• Administer SAP GRC access processes including requests, provisioning, amendments and periodic reviews.
• Investigate access issues, role defects and security incidents; assess SOD and mitigate risks.
• Execute and quality-check SOX/ITGC controls with auditable evidence.
• Support control testing, walkthroughs and audit requests; track remediation.
• Analyze data to identify exceptions and produce reporting.
• Manage access for non-SAP finance/business apps with least-privilege controls.
• Represent SAP Security on projects and coordinate with global teams and auditors.
• Identify opportunities to simplify and automate security/control processes.

Skills

SOX controls

SAP security

Access management

Non-SAP apps

Data analysis

Stakeholder management

Audit support

Project experience

Tools

SAP GRC

Excel

Job description

We're looking for a passionate Senior Analyst, SAP Security and Controlsto join our US ERP Security Team! Reporting to the Manager, Finance Technology Enablement, Business Operations Systems Support User Access & Controls, this position is responsible for creating and maintaining valued partnerships with the business by supporting the business' User Access & Controls needs and processes. This role will coordinate day to day business user support for GRC access request processing and SOX audit responsibilities. This position will also coordinate the day-to-day interface with key business users in the provisions of services; analyze data and activities to provide relevant and up-to-date information to support decision-making and the effective working of National Grid.

This role is based out of our Brooklyn, Waltham or Syracuse office, and we'd hope to see you at least two days per week but you're welcome to be in the office more often if that would work best for you. We're happy to discuss any additional flexibility in working patterns or requirements that you feel could help to make this job work for you!

What You'll Get

• Support the SAP security and authorisation environment, including user administration, roles, profiles, authorisation objects, Fiori or portal access and related security configuration.
• Administer SAP GRC or equivalent access processes, including access requests, provisioning, amendments, removals, privileged or emergency access and periodic reviews.
• Investigate and resolve access issues, role defects and security incidents, and assess Segregation of Duties and critical access risks, supporting remediation through role redesign, access removal or mitigating controls.
• Execute and quality-check SOX, IT General Controls, business and financial controls for SAP and other in-scope applications, maintaining complete, accurate and auditable evidence.
• Support control testing, walkthroughs and internal or external audit requests, identify control or evidence weaknesses and track sustainable remediation through to completion.
• Analyse access, control and system data to identify exceptions, anomalies, trends and risks, and produce clear management information and reporting.
• Administer access and security for selected non-SAP finance and business applications, maintaining appropriate records, documentation, evidence and least-privilege access.
• Represent SAP Security and Controls on projects, enhancements and transformation programmes, contributing to requirements, role and control design, testing, issue resolution, go-live readiness and transition into business as usual.
• Work collaboratively with global Finance, Technology, Risk and Controls, Digital Risk and Security, auditors, business teams and third-party providers to resolve issues and deliver consistent outcomes.
• Identify opportunities to simplify, standardise and automate security and control processes while maintaining governance, auditability and control effectiveness.

What You'll Have

• Practical controls experience gained through control operation, risk and controls, internal or external audit, compliance or a comparable assurance role, with a sound understanding of control design, evidence, testing, issue management, remediation and audit readiness.
• Practical SAP experience gained through SAP security or authorisation maintenance, SAP controls, SAP audit, access management, application support, system maintenance or a comparable role.
• Minimum of 5 + years Sarbanes Oxley controls (SOx) experience
• Strong leadership, meticulous attention to detail, excellent verbal and written skills and excellent interpersonal skills
• Working knowledge of SAP roles and authorisations, user administration, access management, Segregation of Duties, critical or privileged access and risk mitigation.
• Experience administering or supporting access for non-SAP enterprise applications, with the ability to learn new systems and apply consistent security and control principles.
• Experience supporting projects, system changes or transformation activity, including requirements analysis, testing, documentation, risk assessment, go-live and transition to business as usual.
• Strong analytical skills and confidence working with large datasets, including Excel formulas, lookups, pivot tables, filters and data-quality checks.
• Ability to investigate complex issues, understand business and end-user needs and recommend practical, proportionate and risk-based solutions.
• Clear communication and stakeholder-management skills, with the ability to work effectively across global teams, auditors, technical specialists and third-party providers while managing competing priorities across time zones.

Don't meet every single requirement? Studies have shown that women and people of colour are less likely to apply for jobs unless they meet every single qualification. At National Grid, we are committed to building a diverse, inclusive, and authentic workplace for everyone. So, if you're excited about this role but your experience or qualifications don't match the job description exactly, we encourage you to apply anyway. You might just be the right person for our growing business in this role or another one.

Further Information

This is a hybrid working role from our Warwick office with circa 2 days in the office. The closing date for this vacancy is Midnight 20 October 26, with interviews due to take place w/c 26 October 26 onwards. National Grid's recruitment periods can and may vary. We reserve the right to remove this advert or close it to further applications at any point during the recruitment process.

About us

Every day we deliver safe and secure energy to homes, communities, and businesses. We are there when people need us the most. We connect people to the energy they need for the lives they live. The pace of change in society and our industry is accelerating and our expertise and track record puts us in an unparalleled position to shape the sustainable future of our industry. To be successful we must anticipate the needs of our customers, reducing the cost of energy delivery today and pioneering the flexible energy systems of tomorrow. This requires us to deliver on our promises and always look for new opportunities to grow, both ourselves and our business

At National Grid, we work towards the highest standards in everything we do, including how we support, value and develop our people. Our aim is to encourage and support employees to thrive and be the best they can be. We celebrate the difference people can bring into our organisation, and welcome and encourage applicants with diverse experiences and backgrounds, and offer flexible and tailored support, at home and in the office. Our goal is to drive, develop and operate our business in a way that results in a more inclusive culture. All employment is decided on the basis of qualifications, the innovation from diverse teams & perspectives and business need. We are committed to building a workforce so we can represent the communities we serve and have a working environment in which each individual feels valued, respected, fairly treated, and able to reach their full potential.

#LI-RB2

#LI-hybrid

Salary:

Syracuse NY: $105k - $120k

Waltham MA: $118k - $133k

Brooklyn NY: $126k - $140k

National Grid will not be providing visa sponsorship for this position now or in the future. You must have the ability to work without a need for current or future visa sponsorship.

National Grid utilizes an assessment that evaluates the job qualifications/characteristics using AI or statistically based scoring. For more information, please view NYC Local Law 144.

This position has a career path which provides for advancement opportunities within and across bands as you develop and evolve in the position; gaining experience, expertise and acquiring and applying technical skills. Candidates will be assessed and provided offers against the minimum qualifications of this role and their individual experience.

National Grid is committed to providing equal employment opportunities to all employees and applicants for employment regardless of protected class. We do not discriminate on the basis of race, color, religion, sex (including pregnancy, gender identity, and sexual orientation), national origin, age, disability, genetic information, or any other protected status in accordance with applicable federal, state, and local laws. National Grid maintains affirmative action programs for individuals with disabilities and protected veterans.

Our employment practices are designed to ensure that all individuals are treated fairly and with respect throughout the hiring process and during employment. National Grid complies with all applicable federal, state, and local anti-discrimination laws. We are dedicated to fostering a workplace that is free from unlawful discrimination and harassment, and we encourage a culture of respect for all.