Senior SAP Security & Controls Specialist

National Grid; New York (NY); Hybrid; USD 105,000 - 140,000; Full time

Job summary

National Grid in the US is seeking a Senior Analyst, SAP Security and Controls to join the US ERP Security Team. You will support SAP security, GRC access processes and SOX controls across business units, delivering timely, auditable evidence and ensuring risk-based access management.

You will collaborate with global Finance, Technology, Risk and Controls teams, auditors and business users across Brooklyn, Waltham or Syracuse with a hybrid schedule and flexible patterns to fit business needs.

Qualifications

• SOX controls experience and audit readiness.
• SAP security/authorisation maintenance experience.
• Experience with access management and role defects.
• Ability to analyze large data sets and provide management information.
• Strong communication and stakeholder-management skills.

Responsibilities

• Support SAP security and authorisation environment including user administration, roles, profiles, and Fiori/portal access.
• Administer SAP GRC access processes including requests, provisioning, amendments and periodic reviews.
• Investigate access issues, role defects and security incidents; assess SOD and mitigate risks.
• Execute and quality-check SOX/ITGC controls with auditable evidence.
• Support control testing, walkthroughs and audit requests; track remediation.
• Analyze data to identify exceptions and produce reporting.
• Manage access for non-SAP finance/business apps with least-privilege controls.
• Represent SAP Security on projects and coordinate with global teams and auditors.
• Identify opportunities to simplify and automate security/control processes.

Skills

SOX controls

SAP security

Access management

Non-SAP apps

Data analysis

Stakeholder management

Audit support

Project experience

Tools

SAP GRC

Excel

Job description

National Grid in the US is seeking a Senior Analyst, SAP Security and Controls to join the US ERP Security Team. You will support SAP security, GRC access processes and SOX controls across business units, delivering timely, auditable evidence and ensuring risk-based access management.

You will collaborate with global Finance, Technology, Risk and Controls teams, auditors and business users across Brooklyn, Waltham or Syracuse with a hybrid schedule and flexible patterns to fit business needs.