SAP Security Specialist

Basic Function

LYB is seeking an SAP Security Specialist who can drive the design and execution of SAP projects through the understanding of SAP Platform Security with GRC. The SAP Security Specialist will have hands on experience with user and role management for SAP on-prem and cloud applications possessing an extensive experience in GRC Access Controls, ITGC Controls and monitoring, internal/external audit.
 

Roles & Responsibilities

• Identify continual improvement opportunities and, where appropriate, manage them through to successful implementation.
• Assist in advanced troubleshooting of complex of SAP Security issues that cross multiple groups, applying core knowledge and reaching resolution.
• Develop, maintain and manage relevant documentation (policies, standards, baselines, best practice, guidelines and procedures)
• Use empowerment, trust and other strategies as appropriate to develop relationships across the organization.
• Implement and maintain the standards, governance model, best practices and security template design.
• Exceptional SAP Security functional knowledge across GRC, ECC, SOX, SOD, role design and governance processes.
• Design and construct of GRC 12.0 Solution on S4 HANA, Solman, BPC applications, GRC upgrade, migrate and optimization. 
• Successfully implement pre-and post-configuration of GRC 12.0 Access Risk Analysis (ARA); Emergency Access Management (EAM); Business Role Management (BRM), BOT and UI5 user administration. 
• Created Business and Technical roles for different Business Processes Like MM, SD, LE etc.

Min. Qualifications

• Excellent level of functional and technical knowledge of SAP security
• Security experience with SAP ECC 6 EHP 8, Fiori 1.0/2.0, SAP S4 Hana, SAP S4 Finance, SAP BW, SAP GRC 12.0 & SAP IDM 8.0
• Candidate must have hands on experience in user administration and Role administration. Must have detailed understanding and hands on experience in SAP Security, setting up master-derived roles, updating role authorizations, transporting security changes, usage and maintenance of Analysis authorization in BW.
• Experience with cloud deployment models, secure coding, cyber security, data migration, and data security a plus.
• Candidate must have hands on experience in user administration and Role administration. Must have detailed understanding and hands on experience in SAP Security, setting up master-derived roles, updating role authorizations, transporting security changes, usage and maintenance of Analysis authorization in BW.
• Should be able to troubleshoot authorization issues.
• Understanding of GRC access control with hands on experience on troubleshooting workflow errors, uploading of Role master data, updating user Master & Approver data.
• Management of user access to SAP Service marketplace.
• Understanding of SOX controls and relevant documentation.
• Understanding of security for SaaS applications like Success Factor, IBP, ARIBA etc.
• Experience in customized the S4HANA – application and DB and HANA DB Ruleset. 
• Candidate must have excellent collaboration, proven ability to cultivate innovation, drive results and install trust and integrity.
• Candidate will be able to work independently, be self-driven and also delivering through others when necessary. 
• Have proven ability to “Think Outside of the Box.”
• Experience and delivered IT control – automation, BOT / UI user implementation. 

Preferred Qualifications

• Experience in cloud environment and cloud application user administration, SAP IAG, Okta, SailPoint, One Identity etc. would be preferred.

Competencies