Sr Analyst IT Security

Job Summary

Job Description

We are seeking a highly skilled Sr. SAP Governance Analyst. This person will play a critical role in ensuring SAP compliance with regulatory requirements (e.g., SOX), company policies, and industry best practices. This position is responsible for supporting the development of SAP standards and operating procedures, designing, executing, and enforcing SAP IT internal controls (e.g., user access reviews, change reviews), training stakeholders on SAP compliance requirements, developing SAP governance strategies, managing risks, and improving operational efficiencies.
The ideal candidate will be proactive, hands-on, and results oriented.

MAJOR RESPONSIBILITIES
Develop and implement SAP policies, procedures, and guidelines, review exception requests, and oversee enforcement.
Design and govern role-based access control strategies for SAP systems; provide clear guidance for the SAP Security team. Define and propose data protection and privacy protocols such as encryption and masking.
Develop and maintain SAP internal controls environment documentation (e.g., process flows, narratives, control matrices, segregation of duties rulesets, role security matrices, etc.).
Monitor compliance to the end-to-end SAP user access lifecycle, including role assignment, segregation of duties conflict management, approvals, periodic access reviews, and deprovisioning as well as the elevated access management process. Propose process improvements and security enhancements. Execute controls.
Design, implement, and monitor SAP system adherence to software development lifecycle, job monitoring, and other applicable SAP controls. Ensure secure system parameters are defined and configured.
Assist with the development of corrective action plans to address SAP internal control deficiencies and the timely remediation of the deficiencies.
Define and enforce SAP role design and maintenance, including role and authorization object creation, revision, testing, and disablement.
Respond to SAP Security-related incidents.
Maintain segregation of duties ruleset in accordance with business process requirements and enforce rules that prevent conflicts of interest.
Mature the overall SAP controls environment; drive towards automation and continuous monitoring practices.
Prepare for and facilitate internal and external audits, gathering and providing required documentation and evidence of compliance.
Provide training and guidance regarding SAP policies, control procedures, and tools to control owners, role owners/access approvers, and system end users.
Collaborate with cross-functional teams to develop, implement, and remediate SAP processes and controls. Develop and manage relationships with IT and cross-functional stakeholders. Work with cross-functional teams and SAP architects to embed security into all SAP projects.
Track and manage key performance indicators; generate dashboards and reports needed to effectively communicate SAP security risks, segregation of duties conflicts, and other compliance metrics.
Take ownership of projects, ensuring their successful planning, budgeting, execution, and completion.
MINIMUM JOB REQUIREMENTS

Education
Bachelor's degree in Computer Science, Information Technology, Information Security, Engineering, Accounting, or related field, or equivalent work experience.
Certification / Licensure

Work Experience:
Total 5 + Years and 3+ or more years of experience in Internal Controls, SAP Security, SAP Administration, IT Internal Audit, and/or Information Security
Must have experience working in a large and complex SAP environment
Must have experience with Sarbanes-Oxley compliance
Knowledge / Skills / Abilities

Familiarity with using modern GRC or other workflow tools to effectively manage SAP controls execution
In-depth understanding of IT internal controls (i.e., Change Management, Access, IT Operations, segregation of duties rulesets, SDLC)
Experience developing and maintaining internal controls documentation (e.g., risk control matrices, narratives, process flows, etc.)
Strong written and verbal skills, including a demonstrated ability to translate complex or technical information into concepts that are easily understood
Strong analytical, problem solving, and critical thinking skills, including the ability to anticipate issues and to design appropriate solutions
Excellent teamwork skills
Detail and deadline oriented, with the ability to manage multiple tasks and priorities simultaneously with limited supervision
Proficient with Microsoft Office Suite (Word, Excel, PowerPoint, SharePoint, Visio)

About Medline India:
Medline India was setup in 2010 in Pune, primarily as an offshore Development centre and to augment resources for Medline Industries LP headquartered in Chicago, USA. We are a 1500+ strong and growing team of technology, finance & and business support professionals who support our businesses worldwide towards a mission to make healthcare run better. We are proud to be certified as a 'Great Place to Work' by the Great Place to Work Institute (India) for the duration May 2023 - May 2024.
We are an organization with a conducive work environment, ample opportunities to learn, contribute and grow with a highly empowered & engaged team. We encourage our people to share their best ideas and create new opportunities for our customers and ourselves to work together to solve today's toughest healthcare challenges.
About Medline Industries, LP:
Established in 1966, Medline Industries LP is a renowned global healthcare organization boasting 56 years of consecutive sales growth, exceeding $21 billion in annual sales. With a workforce of over 36,000 professionals spread across the globe, we operate in more than 125 countries and territories. As the largest privately held manufacturer and distributor of medical supplies in the United States, Medline is uniquely positioned to offer comprehensive products, education, and support across the continuum of care.
At present, Medline Industries, LP holds the esteemed position as the #1 market leader, delivering an extensive portfolio of over 550,000 medical products and clinical solutions. Our clientele includes hospitals, extended care facilities, surgery centres, physician offices, home care agencies, providers, and retailers. We are proud to be recognized by Forbes as one of America's Best Large Employers and Best Employers for Women. Additionally, the Chicago Tribune has consistently named us a Top Workplace for the past 12 years.