Senior Information Security GRC & SAP Risk Analyst

MiniMed; Minnesota; On-site; USD 110,000 - 170,000; Full time

Job summary

MiniMed is seeking a Senior Information Security Governance, Risk & Compliance Analyst to provide second-line oversight across SAP GRC, SOX ITGC, and control assurance in a global medical technology environment. You will partner with Information Security, IT, Finance, Privacy, Legal, Internal Audit, and business stakeholders to assess risks and strengthen governance practices.

The role requires deep knowledge of access governance, risk management, and compliance requirements, with hands-on

Qualifications

• Bachelor’s degree or equivalent in information security, risk management, or related field.
• Minimum 7 years in Information Security GRC, risk management, SOX ITGC, internal/external audit, or related areas.
• Strong knowledge of SAP GRC Access Control and Process Control administration.
• Experience with regulatory compliance frameworks (SOX, ISO 27001) and control documentation.

Responsibilities

• Coordinate and monitor enterprise Segregation of Duties governance across SAP and other platforms.
• Administer SAP GRC Access Control and related capabilities (Access Risk Analysis, Access Request, Emergency Access).
• Maintain SoD rulesets, risk functions, mitigating controls, and evidence.
• Monitor SoD conflicts, privileged access, and control effectiveness.
• Develop dashboards and reports to support governance, risk, and compliance activities.
• Support audit responses and evidence collection.
• Contribute to governance operations, policy development, and control optimization.

Skills

Information Security

GRC

risk management

SOX ITGC

SAP Security Governance

regulatory compliance

data protection

Education

Bachelor’s degree in Information Security or related field

Tools

SAP GRC Access Control

SAP GRC Process Control

SAP Security Governance

Job description

MiniMed is seeking a Senior Information Security Governance, Risk & Compliance Analyst to provide second-line oversight across SAP GRC, SOX ITGC, and control assurance in a global medical technology environment. You will partner with Information Security, IT, Finance, Privacy, Legal, Internal Audit, and business stakeholders to assess risks and strengthen governance practices.

The role requires deep knowledge of access governance, risk management, and compliance requirements, with hands-on