SAP Security Analyst

Exempt

Oldcastle Infrastructure™, a CRH company, is the leading provider of utility infrastructure solutions for the water, energy, and communications markets throughout North America. We’re more than just a manufacturer of precast concrete, polymer concrete, or plastic products. We’re a trusted and strategic partner to engineers, contractors, distributors, specifiers, and more. With our network of more than 80 manufacturing facilities and more than 4,000 employees, we’re leading the industry with innovation and a safety-first mindset.

Oldcastle Infrastructure - Built For Life from Oldcastle Infrastructure on Vimeo .

Job Summary

Oldcastle Infrastructure Inc. (OII) is looking for SAP Security Analyst. He/She will be responsible for architecting, implementing, and maintaining SAP Security access and user access controls for all the SAP instances of the company. This position will work closely with the SAP functional teams and the system integration partner in architecting, designing, implementing, and governing the SAP security framework for a large business process transformation program involving an S4 implementation. The analyst will also work with the Internal Audit, Risk, and Compliance teams to ensure the internal and external audit requirements are met.

Job Location

• This role will work hybrid out of our office in the Sandy Springs, GA area.

Job Responsibilities

• Design, manage and deploy a global SAP security model.
• Maintain and enhance the process for SAP security role maintenance and administration.
• Develop and maintain the centralized GRC rule sets, workflows, and approvers for user provisioning /de-provisioning, authentication/authorization/emergency access, and access recertification based on business needs, industry best practices, and regulatory requirements.
• Review the business blueprint, functional specifications for SAP security role development, authorization, and user acceptance test plans and participate in cutover activities during go-live phases.
• Design, Implement, document, and maintain IT general controls relative to new and modified business and IT processes.
• Administration and provisioning of security roles for SAP and non-SAP applications that integrate with the SAP instances.
• Conduct detailed analysis sessions with end-users and business SMEs.
• Ensure that the security roles are appropriately assigned to users and tested thoroughly before deployment.
• Evaluate business risks associated with security role design, implement appropriate controls to address those risks, and provide recommendations on ways to simplify and streamline the security design.
• Identify role owners and automate the role and user provisioning processes.
• Perform user access review and provide analysis for internal and external auditors as required.
• Work as a member of a project team to coordinate the development and determine project scope and limitations
• Monitor, report, and remediate elevated role provisioning to ensure unauthorized access removal for live production
• Ensure role provisioning and user access privileges comply with company security policies and SOX regulations.

Job Requirements

• 7+ years of experience in application security
• Thorough understanding of the SAP Authorization concept and the role-based access control model.
• Knowledge of information security frameworks, methodologies, policies, standards, and best practices.
• Knowledge of identity and access management tools and processes
• Thorough understanding of SoX ITGC controls
• Knowledge of IT risk management – NIST RMF
• Ability to assess business role requirements, design authorization roles, and manage supporting authorizations.
• Ability to speak to infrastructure-level security concerns and to work with the technical team to ensure such concerns are addressed.
• Ability to provide guidance and direction to SAP technical and non-technical staff as well as Internal Audit key stakeholders on SAP security frameworks and processes
• Demonstrated experience managing customer-facing, strategic projects as well as Application Development projects.
• Strong conceptual, analytical, problem-solving, troubleshooting, and resolution skills.
• Ability to work in a collaborative team environment with individuals at appropriate levels of the company.
• Bachelor's Degree or equivalent in Computers, Information Technology, or related field.
• Experience implementing and utilizing GRC security tool
• SAP security administration
• Experience in working with vendor teams.

What CRH Offers You

• Highly competitive base pay
• Comprehensive medical, dental and disability benefits programs
• Group retirement savings program
• Health and wellness programs
• An inclusive culture that values opportunity for growth, development, and internal promotion

About CRH

CRH has a long and proud heritage. We are a collection of hundreds of family businesses, regional companies and large enterprises that together form the CRH family. CRH operates in a decentralized, diversified structure that allows you to work in a small company environment while having the career opportunities of a large international organization.

If you’re up for a rewarding challenge, we invite you to take the first step and apply today! Once you click apply now, you will be brought to our official employment application. Please complete your online profile and it will be sent to the hiring manager. Our system allows you to view and track your status 24 hours a day. Thank you for your interest!

Oldcastle Infrastructure, a CRH Company, is an Affirmative Action and Equal Opportunity Employer.

EOE/Vet/Disability

CRH is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, status as a protected veteran or any other characteristic protected under applicable federal, state, or local law.