Senior SAP Security & ITGC Specialist

FALL CREEK FARM & NURSERY; Chicago (IL); On-site; USD 120,000 - 150,000; Full time

Job summary

FALL CREEK FARM & NURSERY is seeking a Sr. Analyst, IT - SAP Security Controls in Chicago to lead and execute SAP security, access management, and ITGC controls.

You will partner with analysts and vendor teams to mature the controls program and expand coverage to additional SAP products over time. Responsibilities include designing SAP role provisioning, maintaining SoD rules, governing Firefighter access, and ensuring evidence is audit-ready.

Qualifications

• 7+ years of hands-on SAP Security experience with strong SAP role design, provisioning, and access-management depth.
• Experience with SAP GRC (Access Control 12.0) is a strong plus.
• Demonstrated hands-on experience owning and executing SAP-specific ITGCs at the control-owner level.
• Track record of remediating SOX/ITGC audit findings systemically.
• Experience with control evidence retention, IPE validation, reviewer sign-off standards, and defending controls in front of external auditors.
• Experience with controls execution for other SAP products such as SAP Ariba and SuccessFactors is a huge plus.
• Demonstrated ability to lead — mentoring junior team members, setting standards, and directing internal and external contributors.

Responsibilities

• SAP Security & Access Management: Manage SAP role design, provisioning, and de-provisioning aligned to business roles and least-privilege principles.
• Design and maintain the SoD ruleset within our current toolset; own SoD analysis, mitigation, and remediation across SAP applications.
• Own Firefighter governance — request, approval, monitoring, and log review.
• Support integration of SAP security events with the enterprise SIEM.
• SAP ITGC Ownership and Execution: Serve as the control owner and executor for SAP-specific ITGCs, including quarterly User Access Review and other monthly reviews.
• Ensure control execution is timely with proper reviewer approval, evidence retention, and documentation to support audit and SOX requirements.
• Maintain and improve control templates; standardize and version-control templates across cycles.
• Track and remediate SOX/ITGC findings; ensure remediation is systemic.
• Partner with Internal Audit and external auditors on requests and evidence review.
• Support expansion of controls coverage to other SAP products as they come into scope.
• Collaboration and Delivery: Direct and validate work by external AMS partners; ensure quality and alignment.
• Collaborate with stakeholders and vendors to ensure project delivery and system support.

Skills

SAP Security

Access Management

ITGCs

SOX compliance

SoD analysis

Vendor collaboration

Change management

Stakeholder management

Mentoring

Tools

Fastpath

CSI

Pathlock

SIEM

Job description

FALL CREEK FARM & NURSERY is seeking a Sr. Analyst, IT - SAP Security Controls in Chicago to lead and execute SAP security, access management, and ITGC controls.

You will partner with analysts and vendor teams to mature the controls program and expand coverage to additional SAP products over time. Responsibilities include designing SAP role provisioning, maintaining SoD rules, governing Firefighter access, and ensuring evidence is audit-ready.