As a Sr. SAP Security Analyst / BSA, reporting to the Senior Manager of SAP ERP Applications, you will be responsible for designing, implementing, maintaining, and supporting SAP Security and SAP GRC solutions across the global SAP landscape. You will work closely with business, application, infrastructure, audit, and compliance teams to ensure secure and compliant access to SAP applications.

You Will Make an Impact By:

SAP Security & Role Management:
Design, implement, maintain, and support SAP Security roles across various SAP products and projects. Develop and maintain role-based access models, including RBAC, and ensure appropriate segregation of duties (SoD). Support SAP ECC 6.0 EHP7/EHP8 environments, with knowledge of S/4HANA highly desired.

SAP GRC Administration & Access Governance:
Administer and support SAP GRC Access Control configuration, including rule sets, workflows, approvers, user provisioning, Emergency Access Management (EAM), and access recertification processes. Maintain SAP GRC master data and support the configuration and execution of risk analysis and mitigation activities.

Access Reviews & Compliance:
Configure and support user access review processes, workflows, and relevant parameters. Perform access and risk analysis and support audit and compliance activities. Work closely with internal and external auditors on SAP Security, SoD, SOX, and IT General Controls (ITGC) requirements.

Incident & Problem Management:
Provide support to AMS team in troubleshooting and resolve day-to-day SAP authorization, role, provisioning, and workflow-related issues. Investigate access-related incidents, identify root causes, and implement appropriate corrective actions while ensuring adherence to operational standards and service level commitments.

Risk Management, Controls & Audit:
Support IT risk management activities and help identify, assess, and address SAP-related business and IT risks. Execute and maintain IT General Controls to ensure control effectiveness. Participate in audit discussions, respond to audit questions, and support the remediation of SoD, SOX, and security control issues.

Project & Stakeholder Management:
Work closely with PMO teams, SAP application teams, business stakeholders, and external partners to deliver SAP Security solutions and support project requirements. Collaborate with cross-functional teams during SAP implementations, upgrades, role redesigns, and other security initiatives.

Security Standards & Documentation:
Ensure SAP Security and GRC processes comply with organizational security policies, controls, and best practices. Maintain accurate security documentation, technical specifications, procedures, and knowledge materials.

SAP Security Operations & Continuous Improvement:

Identify opportunities to improve security processes, automation, and operational efficiency.

Skills You Bring:

• Bachelor’s degree in computer science, Information Technology, or equivalent.
• 7–10 years of experience in SAP Security and SAP GRC within global enterprise environments.
• Strong experience with SAP Security role design, build, deployment, administration, and troubleshooting.
• Strong hands-on experience with SAP GRC Access Control, including Access Risk Analysis, Access Request Management, Business Role Management, Emergency Access Management, workflows, and rule sets.
• Experience with SAP ECC 6.0 EHP7/EHP8; knowledge of SAP S/4HANA highly desired.
• Proven experience with different SAP Security and role-design models, including RBAC.
• Experience supporting SAP GRC upgrades and SAP system upgrade activities.
• Experience troubleshooting SAP GRC workflows, synchronization jobs, provisioning, and authorization issues.
• Strong understanding of SoD, SOX, IT General Controls (ITGC), audit, and compliance requirements.
• Experience working with internal and external auditors and supporting audit remediation activities.
• Knowledge of IT and business risk management and control frameworks.
• Experience working in a global enterprise environment and collaborating with cross-functional teams.
• Strong communication, stakeholder management, time management, and project management skills.
• Ability to work independently and manage multiple priorities in a global environment.
• Excellent English communication skills, both written and spoken.
• Nice to have: Experience with SAP Cloud security and identity, including Ariba, C4C, and IBP.

#LI-MK1
 

Globally, our policy is to recruit individuals from wide and diverse backgrounds. However, certain positions require access to controlled goods and technologies subject to various export control regulations.  Applicants for these positions may be limited (by, for example, their countries of citizenship, country of origin, or immigration status) where required by law or governmental contact, and/or employment made contingent upon the issuance of appropriate governmental licensing.

MKS Inc. and its affiliates and subsidiaries (“MKS”) is an affirmative action and equal opportunity employer: diverse candidates are encouraged to apply. We win as a team and are committed to recruiting and hiring qualified applicants regardless of race, color, national origin, sex (including pregnancy and pregnancy-related conditions), religion, age, ancestry, physical or mental disability or handicap, marital status, membership in the uniformed services, veteran status, sexual orientation, gender identity or expression, genetic information, or any other category protected by applicable law. Hiring decisions are based on merit, qualifications and business needs. We conduct background checks and drug screens, in accordance with applicable law and company policies.  MKS is generally only hiring candidates who reside in states where we are registered to do business.

MKS is committed to working with and providing reasonable accommodations to qualified individuals with disabilities. If you need a reasonable accommodation during the application or interview process due to a disability, please contact us at: [email protected] .

If applying for a specific job, please include the requisition number (ex: RXXXX), the title and location of the role