Senior Lead Information Security Analyst (SAP Security

Jobgether; United States; Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Group health insurance

Hybrid working model

Paid time off

Job summary

Jobgether seeks an experienced SAP Security Specialist to design and implement secure access across multiple SAP environments. You will manage user/role administration, participate in governance, and coordinate security improvements with global teams.

The role emphasizes SOX compliance, risk-based access management, and ongoing security enhancements in a hybrid work setting.

Qualifications

• Bachelor’s degree in engineering, IT, CS, or related STEM field.
• Master’s degree and SAP/GRC certifications are advantageous.
• Experience with SAP security architecture, RBAC, and access controls.

Responsibilities

• Design, implement, maintain, and support SAP security across apps and platforms.
• Administer SAP users and roles, ensuring proper access and permissions.
• Support SOX/audit compliance, SoD controls, and access reviews.

Skills

Analytical thinking

Communication & collaboration

Autonomy & adaptability

Problem-solving

Stakeholder management

Education

Bachelor’s degree in Engineering/IT/CS

Master’s degree (preferred)

Tools

SAP

Tableau

SAP BO/BOBJ

Job description

Accountabilities

• - SAP security design and implementation: Design, implement, maintain, and support SAP security solutions across multiple applications and platforms, ensuring secure access and alignment with business requirements.
• - User and role administration: Manage SAP user access and authorization structures, including single roles, composite roles, role design, role maintenance, and access management. Ensure that permissions are appropriately assigned and maintained.
• - Access governance and compliance: Ensure adherence to internal security policies, audit requirements, and the Sarbanes-Oxley (SOX) framework. Support access reviews, segregation of duties (SoD) controls, compliance assessments, and security governance activities.
• - Security incident and service management: Investigate and resolve SAP security incidents and service requests, support audit findings, and coordinate appropriate corrective actions to maintain secure and reliable business operations.
• - Business process and authorization analysis: Analyze business processes, workflows, transactions, tables, and authorization objects to identify security gaps and recommend efficient, compliant access solutions.
• - Security standards and documentation: Develop, maintain, and improve SAP security standards, procedures, technical documentation, and operational guidelines to promote consistency and strengthen security practices.
• - Testing and change implementation: Participate in security testing, system enhancements, implementation activities, and access validation to ensure changes meet security requirements and quality standards.
• - Project and initiative management: Support multiple SAP security initiatives simultaneously, including small- to medium-sized enhancement projects and broader transformation programs, ensuring timely delivery and effective risk management.
• - Cross-functional collaboration: Partner with application owners, business stakeholders, and technical teams across global functions to understand access requirements, resolve security challenges, and implement appropriate controls.
• - Continuous improvement: Identify opportunities to improve SAP security architecture, role design, compliance processes, and access management practices while staying current with emerging technologies and industry standards.

Requirements:

• - Professional experience: At least 6 years of hands-on experience in SAP Security, including practical responsibility for security administration, authorization design, and access management.
• - SAP security expertise: Strong understanding of SAP security architecture, role-based authorization concepts, user administration, single and composite roles, role design, role maintenance, and access controls.
• - SAP platform experience: Practical experience supporting one or more SAP environments, such as SAP ECC, SAP BW/BI, SAP S/4HANA, SAP BW/4HANA, SAP Portal, SAP PI, and SAP SRM. Familiarity with Tableau and SAP BusinessObjects (BOBJ) is also relevant.
• - Audit and compliance knowledge: Experience supporting security audits, compliance activities, SOX controls, access reviews, and security testing, with an understanding of segregation of duties and risk-based access management.
• - Incident and service management: Experience handling SAP security incidents, service requests, access issues, and related operational support activities.- Governance, Risk, and Compliance: Experience with SAP GRC tools is an advantage, and SAP GRC certification is highly desirable.
• - Project delivery experience: Exposure to end-to-end SAP implementation, system enhancement, or transformation projects, including security design, testing, and deployment activities.
• - Education: Bachelor's degree in Engineering, Information Technology, Computer Science, or a related STEM discipline.
• - Preferred qualifications: A master's degree in a relevant field, professional SAP security or GRC certifications, and experience working with Agile or hybrid delivery methodologies are advantageous.
• - Industry exposure: Experience in aerospace, manufacturing, or other large, globally distributed organizations is preferred.
• - Analytical and problem-solving skills: Strong analytical thinking, attention to detail, and the ability to investigate complex authorization issues, assess security risks, and develop practical solutions.
• - Communication and collaboration: Excellent communication and stakeholder management skills, with the ability to work effectively with business users, application owners, and technical teams across different regions.
• - Autonomy and adaptability: Ability to manage competing priorities, work independently, and contribute effectively within a global team operating in a dynamic enterprise technology environment.

Benefits:

• - Full-time employment: A permanent-style, full-time opportunity within a global technology and aerospace environment; the specific employment contract terms should be confirmed during recruitment.
• - Hybrid working model: A combination of onsite and offsite work, with the onsite schedule determined in coordination with the team leader.
• - Group health insurance: Medical coverage as part of the employee benefits package.
• - Group term life insurance: Financial protection for eligible employees and their beneficiaries.
• - Group personal accident insurance: Additional coverage against eligible accidental injury risks.
• - Paid time off: 18 days of annual vacation leave and 12 days of contingency leave.
• - Meal benefits: Meal coupons or vouchers to support everyday expenses.
• - Retirement benefits: Access to the National Pension Scheme (NPS), subject to applicable program terms.
• - Travel benefits: Leave Travel Allowance (LTA), subject to the applicable policy.
• - Vehicle-related benefits: Car lease options and fuel, vehicle maintenance, or driver wage benefits, where applicable under company policy.
• - Education support: Access to an employee scholar programme.
• - Work-life balance: A benefits and work arrangement designed to support employee well-being and professional sustainability.
• - Professional development: Opportunities to strengthen expertise in SAP security architecture, SAP S/4HANA, GRC, access governance, and enterprise cybersecurity.
• - Global collaboration: Exposure to international teams, complex enterprise systems, and strategic digital technology initiatives.
• - Important hiring condition: Background verification is required for external new hires in India. Additional screening requirements may apply depending on the position and applicable policies.