SAP Security Administrator

Job Title

Expectations of Resource1. Evaluate practices of third-party vendors and service providers.2. Analyze the collected information to assess the overall risk profile of third parties.3. Evaluate the security posture and GRC practices of third-party vendors and service providers.4. Evaluate the TPRM program currently in place.5. Recommend improvements to TPRM program and operational handbook.1. Review third party risk reports and choose the top 10 risks which must be remediated.a. Support remediation planning for risks 11-xx.2. Review and improve processes taking advantage of recommended best practices.3. Coordinate the collection of necessary documentation such as security certifications, audit reports, and compliance evidence.

General Function

This position is responsible for all aspects of testing, implementing and monitoring user access within the SAP IS Retail system. All access has to be in compliance with Sarbanes Oxley requirements.

Major Duties and Responsibilities

Execute security setup-up and changes for all SAP (includes SAP ECC 6.0 and Business Intelligence 7.0) business users within the respective business areas/departments, which protects system integrity and allows appropriate access to each user.

Document and maintain system security processes and procedures.

Assist with design, configuration, implementation and monitoring of the SAP Application Security component of SAP systems and adhere to security policies and procedures that safeguard the data integrity.

Test all aspects of system security as needed during service packages, upgrades and addition of new modules, etc.

Maintain and enforce the authorization plan for new system users.

Responsible for working with business areas and IT in developing appropriate SAP Authorizations and ensuring proper system controls are in place.

Continue to grow knowledge of the SAP security processes through internal and external training classes.

Work with administrative units to establish security for new users and eliminate security for staff terminations and develop/document related procedures.

Assist determining security requirements & investigate security issues related to new modules, upgrades and service packages.

Coordinate the custom application security solution with the Basis and development teams.

Execute, enforce and monitor the custom application security solution/requirements.

Act as a primary resource for troubleshooting user access issues and determining solutions to issues.

Support security and compliance team and their initiatives.

Act as an additional resource for the Supply Optimization team on various projects performing non-security related activities, such as data conversion, Business Intelligence and Master Data Maintenance.

General Skills

Strong oral and written communication skills

Demonstrated ability to work with business and IT partners

Flexible, enthusiastic approach to work including a strong desire to learn a new product and a new business domain

Ability to succinctly identify system security requirements and document appropriately.

Ability to communicate to a wide variety of audiences including business, compliance, technical and management

Ability to work independently with minimal direction

Solution oriented, creative thinker

Experience in engineering security processes and system controls.