Senior SAP Security Admin

User and Authorizations Management

• Manage users in the SAP systems according to the existing processes as second and third level support (problem management, maintain knowledge DB, run recertification campaigns, etc)
• Develop, enforce and maintain all SAP systems authorizations concepts and key security aspects, such as password settings, idle log off time, rec client settings, etc.
• Provide input to improve existing SAP authorizations concepts
• Monitor and perform reviews of Segregation of Duties (SoD) conflicts, including regular updates of the SoD framework as well as reporting conflicts and work with business to resolve them (mitigation / remediation)
• Maintain, monitor and improve the firefighter ID framework for SAP applications
• Provide Security User Management of additional systems such as SalesForce, O9, STIBO, etc
  

Processes

• Responsible for maintenance of existing user and authorizations management processes
• Steer and monitor both internal and external AMS security admins, especially concerning their proper training and the quality of their work
• Provide input to improve and automate the security team processes (establish AMS involvement, work with business to establish rules for access provisioning automation, etc.)
• Collaborate with first level support teams to guarantee a seamless handshake in the support processes
• Collaborate with other IT teams to provide key inputs and guidance on SAP security
• Collaborate and assist Controls team with review of applicable IT Policies and Standard Operating Procedures according to the Japanese Sarbanes Oxley Act (JSOx)
  

Projects & Tools

• Support SAP-related projects for security relevant aspects, e.g., new roles concept development for system implementations
• Support the team in selecting and implementing the tools needed to improve and, where possible, automate user and authorizations management processes
• Responsible to manage and monitor the tools used by the security team, including, but not limited to, SAP GRC AC, Saviynt EIC, Xiting XAMS, etc.